A form of identity theft where a bad actor gains unauthorized access to an existing user’s account by stealing credentials through phishing, credential stuffing, social engineering, or malware. Once inside, the attacker may change account settings, exfiltrate data, or initiate fraudulent transactions. ATO is one of the fastest-growing fraud vectors in digital financial services.