--- title: "Cybersecurity month: Turning customers into an ATO defense through education" date: 2025-10-27T00:00:00+00:00 author: Katrina Scott canonical_url: "https://www.ravelin.com/blog/cybersecurity-awareness-for-ato" section: Blog --- Blog /[Account takeover](/resources?search=&category%5B0%5D=134546#resourceContainer "Go to Account takeover") # Cybersecurity month: Turning customers into an ATO defense through education Account takeovers often start with customers. This Cybersecurity Month, turn a potential vulnerability into a key defense by educating customers on security best practices. 27 October 2025 ![Cybersecurity month: Turning customers into an ATO defense through education](https://storage.googleapis.com/ravelin-website-assets-production/assets/images/_blogSmall/269018/445-European-Cybersecurity-Month-885x505-%E2%80%93-1.webp) October is European Cybersecurity Month (ECSM). It’s an annual campaign by the European Union Agency for Cybersecurity and the European Commission, aiming to raise awareness of cyber threats and security best practices – and for online merchants, it’s a reminder that security is a shared responsibility. Today, we are thinking about the intersection of fraud detection and cybersecurity, and how this can be used to your advantage. For ecommerce companies, investing in customer cybersecurity awareness has several benefits – including reducing risk and boosting your brand image. ## **Recruiting customers to the fight against cybercrime** In many companies, fraud and cybersecurity teams work independently, which can have its advantages. But collaboration can make a meaningful difference. The crossover between cybersecurity and fraud detection is perhaps most evident when considering [account takeover attacks, also known as ATO](https://www.ravelin.com/insights/account-takeover-fraud). While internal controls are vital, a cybersecurity framework is only as strong as its weakest link. You have a lot to benefit from empowering your customers to recognize and avoid common cyberattacks. Customers who reuse passwords or click suspicious links, for example, are more likely to have their credentials stolen in phishing attacks. Businesses then face unauthorized purchases, [costly chargebacks](https://www.ravelin.com/blog/how-are-you-counting-the-cost-of-chargebacks), non-compliance fees, and a loss of customer trust and brand reputation. Almost half of businesses (44%) say that fraud impacts their brand image KPIs, with 30% also claiming that ATO attacks cost them the most money of any fraud type, per Ravelin’s [Global Fraud Trends Report 2025](https://pages.ravelin.com/global-fraud-2025-trends-survey). This makes ATO prevention a priority. And while much of the focus is on incident response, educating customers about phishing stops many attacks from occurring in the first place. It also increases trust in your brand. Customers who feel that you prioritize their security are more likely to buy from you, make repeat purchases, and recommend your business. ## **How can merchants incorporate customer security awareness into their strategy?** Recommended methods to spread cybersecurity awareness in your customer base include email communications, popups and guides on your website. The good news is that such a campaign doesn’t require new technology or technical knowhow. Instead, it involves incorporating education into your communication strategy. To increase awareness, consider: - **Sending emails that educate customers about phishing**. These can take the form of infographics, videos or text email campaigns. Make sure to emphasize steps such as checking the sender’s email address and hovering over links before clicking. You can also remind customers that you never ask for sensitive information via email. - **Highlighting the protections you have in place**. Make it clear to customers that you are taking the security of their accounts seriously. Be as specific as possible – for example, say so if you have deployed [ATO checkpoint protection at both login and checkout](https://www.ravelin.com/blog/ato-checkpoints-protection). Layered protection is best, since strengths in login protection compensate for weaknesses in checkout protection, and vice versa. - **Nudges on your website**. A brief message or popup at the login or checkout stage of your online shopping platform can reinforce the need for strong password hygiene. At checkout, explain secure payment practices without introducing friction to the payment process. - **Posting security tips to your website and social channels.** To keep security top of mind, share an image or infographic detailing common phishing tips and effective password hygiene. You could even go through [how scammers exploit user vulnerabilities and take over accounts](https://www.ravelin.com/blog/how-do-fraudsters-take-over-accounts) to make the tips more relatable. These actions won't eliminate every instance of fraud. But they do create a more security-minded customer base which, in turn, reduces your exposure to account takeover fraud. ## **Moving from awareness to action** Take the opportunity to engage your customers about how they can best protect their accounts. As a fraud manager, you can reach out to your company’s Marketing team to coordinate a campaign. This kind of cross-function collaboration can, in the long run, help you collaborate more closely with [a department whose campaigns may impact your fraudscape](https://www.ravelin.com/blog/marketing-push-ecommerce-fraud). Sharing ecommerce security tips with customers reduces fraud-related losses, demonstrates transparency, and shows them that you’re committed to their security and user experience. Having strong internal cybersecurity measures to support customer awareness is just as important. To better understand the technical side of prevention and how you can manage a breach, read Ravelin's [complete guide to account takeover fraud](https://www.ravelin.com/insights/account-takeover-fraud). ![Ravelin Logo](https://storage.googleapis.com/ravelin-website-assets-production/assets/images/ravelin-symbol-logo-transparent.webp) ## Register for the newsletter Stay up to date with the online fraud and payments landscape and everything Ravelin – including events, webinars and new reports. Sign up here ## Author ![Katrina Scott](https://storage.googleapis.com/ravelin-website-assets-production/assets/images/_avatarSmall/866/meet-the-team-katrina-product-manager-at-ravelin_181024_074740.webp) Katrina ScottProduct Director A lifelong fascination with crime and conflict led Katrina to study Politics and Criminology before earning her Master’s in Security Studies. Initially… [More from this author](https://www.ravelin.com/author/katrina-scott) ## Related content [Blog / Press release ### Driven by AI, customers now rival criminals for ecommerce fraud, say merchants Global ecommerce fraud enters a new phase as losses continue to climb. Merchants now view criminals and their own customers as presenting a comparable risk, and there's a gap in AI adoption. ![Ravelin Symbol Blue 1](https://storage.googleapis.com/ravelin-website-assets-production/assets/images/_33x33_crop_center-center_none_ns/187712/Ravelin-Symbol-Blue-1.webp)Ravelin Technology](https://www.ravelin.com/blog/ravelin-fraud-survey-2026-press-release) [Blog / Payments & payment fraud ### Safeguarding agentic commerce – fraud strategy advice by Ravelin's CPO "If there’s anything fraudsters like, it’s a new thing." Here's how to protect your online shop from agentic commerce fraud – which can target you no matter whether you're actively adopting AI shopping or not. ![RAVELIN STAFF Mark Barlow Head Of product website](https://storage.googleapis.com/ravelin-website-assets-production/assets/images/_33x33_crop_center-center_none_ns/175066/RAVELIN_STAFF_Mark_Barlow_Head_Of_product_website.webp)Mark Barlow,Chief Product Officer](https://www.ravelin.com/blog/agentic-commerce-fraud-prevention-strategy-analysis) [Blog / Ravelin product ### Next-level reporting with Ravelin: Introducing Insights and AI-powered queries Discover how the new Insights section and AI-powered queries in the Ravelin Dashboard simplify your fraud reporting. ![Ashleigh](https://storage.googleapis.com/ravelin-website-assets-production/assets/images/_33x33_crop_center-center_none_ns/267519/ashleigh.webp)Ashleigh Luccini Gilera,Senior Product Marketing Manager](https://www.ravelin.com/blog/fraud-reporting-insights-ai-queries)