Account takeover (ATO) fraud happens when a cybercriminal is able to gain access to valid login credentials and uses them to break into user accounts to steal funds or personal information. Recycling and reuse of login credentials across digital accounts makes it easier for attackers to compromise multiple accounts.