Account Takeover attacks an application’s sign-in page with a goal of gaining unauthorized access to an existing account, whereas account creation fraud targets the application’s sign-up page with a goal of committing fraud through these fake accounts. ATP is focused on preventing credential stuffing and brute force attacks, where attackers automate hundreds of login attempts, testing stolen credentials across multiple sites. Instead, ACFP focuses on preventing automated fraud such as promotional or sign-up abuse, loyalty or rewards abuse and phishing. ACFP and ATP can be used independently of each other or used together.