● Covered by 1 source · 1 reportHigh impact
2026 Sees Shift in Account Takeover Tactics Focusing on Verification Steps
Key points
- 75% of global consumers have enabled passkeys as of 2026.
- Fraud is moving to identity verification and recovery processes.
- Over 85% of fraud attacks involve impersonation.
- 4.18% of verification attempts were fraudulent, according to Veriff.
Changing Landscape of Account Takeover
Account takeover (ATO) has traditionally relied on automated credential stuffing attacks, which are becoming less effective as security improves. With passkeys adopted by a majority of users, the methods for gaining unauthorized access must now adapt.
Rise of Passkey Adoption
As reported by the FIDO Alliance, 75% of global consumers have enabled passkeys for at least one account, and 68% of companies are using or testing passkeys for employee access. This trend indicates a significant shift toward passwordless authentication, which reduces the value of stolen passwords.
New Vulnerabilities in Verification Processes
As attackers find it more difficult to exploit primary login methods, the focus has shifted to identity verification layers that still depend on user input. This includes account recovery and step-up verification processes, which have become opportunities for fraud.
Impact of Generative AI on Fraud
Generative AI is making impersonation fraud more prevalent and convincing. According to Veriff's Identity Fraud Report 2026, digitally altered media is now 300% more likely to be encountered, contributing to a 4.18% rate of fraudulent verification attempts.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
Account takeover (ATO) strategies are evolving as 75% of consumers now use passkeys, making traditional credential stuffing less effective. Attackers are shifting their focus to identity verification processes, which remain less secure, as outlined in the 2026 Veriff reports.