Account takeover fraud is when criminals obtain a consumer’s log on information, through nefarious means, such as phishing or buying the information on the Dark Web. The log on credentials open up vast possibilities for a fraudster, because unfortunately many consumers use the same usernames and passwords for multiple sites across the web.