Any organization that offers user accounts protected by a login and password is susceptible to account takeover. With the high availability of emails, user names and passwords compromised through data breaches, phishing scams and other means, organizations are finding that account takeover is becoming more of an issue. Businesses operating online need to take the necessary measures to understand their risk exposure to account takeover (ATO) fraud as well as familiarize themselves with how to better recognize and prevent account takeover.

 

This course was last updated in February, 2019 to include updated statistics regarding data breaches and fraud activity related to account takeover, as well as expanded discussion around third party tools and services that can be used to detect ATO. HTML5 - compatible with all browsers and mobile devices.

Course Access: Unrestricted

 

Course Availability: Online, In-House and Webinar

 

Prerequisites: This is an intermediate level course building off fundamental information about payments and fraud in the Customer Not Present channel. A solid foundation level knowledge in eCommerce fraud is required, and these concepts are covered in the Introduction to Fraud Fundamentals course.

 

The Fraud Practice's Online Portal and Training Courses:

• Available On Demand 24x7
• Fast, Reliable Online Presentation
• SCORM Compliant
• Includes Course Syllabus
• Includes Course Lessons & Quizzes
• Includes Final Exam
• Course Completion Certificate

The Understanding and Mitigating Account Takeover Risk online training course provides the essential information for understanding account takeover risks including how it occurs and the various ways data and accounts can be compromised. Policies, procedures, techniques and third party tools are all discussed in the context of how they affect account takeover risk exposure and how they can be used to mitigate account takeover risk.

 

Key Concepts Covered:

• Account Takeover Risk Exposure
• Email Harvesting
• Phishing and Pharming
• Bots and Brute Force Attacks

• Password Policies
• Stored Billing Instruments
• Behavioral Monitoring Analysis
• Step-Up Authentication

After completing this course you should be able to answer and discuss the following questions:

1. What is account takeover (ATO), how is it committed and what are the ways consumer data is compromised for attempting account takeover?
2. What is the total dollar volume of account takeover fraud losses, how many consumers does it affect and how many data breaches and compromised records occur each year?
3. What is account takeover risk exposure and what factors influence this exposure for an organization?
4. What policies and procedures can organizations implement to reduce their risk exposure to account takeover?
5. What third party tools and techniques are available in the market to help organizations recognize and prevent account takeover, how do they work and how are they applied?

 

Expected time to complete training: 90 minutes (includes quizzes and exam)

 

Course Applicability:

• Payment Types: Payment Cards, Bank Transfers, Alternative Payment Methods
• Channels: eCommerce
• Regions: Global - North America, South America, Europe, APAC, Africa & Middle East
• Level of Difficulty: Intermediate

Taking this course provides 1 Fraud Related Continuing Professional Education (CPE) credit for maintaing CFE credentials with the Association of Certified Fraud Examiners (ACFE).

 

Learn more about CPE credits.

Training Objectives: 

1. Be able to define and discuss account takeover as well as the ways that it can be committed.
2. Be able to discuss where fraudsters get the information for attempting account takeover as well as some statistics on how large of an issue account takeover has become.
3. Be able to discuss the different policies and procedures organizations can have in place to limit account takeover risk while explaining this in the context of account takeover risk exposure.
4. Gain a strong understanding of the various tools, techniques and 3rd party services that can be used for mitigating account takeover risk and how these different tools and techniques can be applied.