--- title: How to raise awareness and get buy-in for an account takeover solution in ecommerce date: 2025-01-06T15:23:00+00:00 author: Jessica Allen canonical_url: "https://www.ravelin.com/blog/how-to-raise-awareness-and-get-buy-in-for-an-account-takeover-solution" section: Blog --- Blog /[Account takeover](/resources?search=&category%5B0%5D=134546#resourceContainer "Go to Account takeover"), [Fraud analytics](/resources?search=&category%5B0%5D=134547#resourceContainer "Go to Fraud analytics") # How to raise awareness and get buy-in for an account takeover solution in ecommerce How can you get senior leadership to pay attention to the risk of account takeover? Here are our recommendations. ![How to raise awareness and get buy-in for an account takeover solution in ecommerce](https://storage.googleapis.com/ravelin-website-assets-production/assets/images/_blogSmall/138547/ato-report-webinar.webp) Account takeover (ATO) happens when fraudsters target the accounts of genuine customers. Often, they'll use their stolen credentials to place fraudulent orders or refund claims, or pose as that genuine customer to conduct any number of other fraudulent schemes. ## **ATO continues to grow** In 2025, CIFAS **reported a year-on-year [76% rise in account takeovers](https://www.fraudscape.co.uk/)** while, in the US, phishing and related techniques that can lead to ATO are the [top type of complaint](https://www.ic3.gov/AnnualReport/Reports/2024_IC3Report.pdf) received by the FBI's IC3. With more customers storing sensitive personal information as well as payment cards in their online accounts, including ecommerce accounts, there is more at stake today than before when it comes to account takeovers. Despite the alarming rise in costs, merchants’ response has been slower. An account takeover looks very different from typical [card-not-present fraud](https://www.ravelin.com/solutions/online-payment-fraud). **A single incident can affect hundreds of different genuine customer accounts at the same time.** By the time the Payments team notices a chargeback relating to an account takeover, often the damage has already been done across multiple other accounts. Many businesses struggle to react quickly if they don’t have specific protection in place for this style of attack. ## **The challenge of buy-in** It's obvious enough that losing a bank account to takeover would be catastrophic, but what about ecommerce? We often hear from merchants who say it’s a challenge to get business leaders to recognize the risk of account takeover and allocate budget to the problem. Aside from the C-suite, account takeover affects many different teams - it impacts Fraud and Payments but also the Risk, Product and Marketing departments. Defining the right way to deal with account takeover is complicated by the goals and priorities of each. For example, the Marketing department may prioritize ease of ordering over repeating authentication checks when a customer logs in using a new device. So, how can you get various departments involved - and your leadership team - to pay attention to the risk of account takeover? Here are our recommendations. ## **1. Make sure everyone understands the cost of account takeover** Protection against typical online card fraud has advanced, and so fraudsters are switching to new sophisticated tactics. Use statistics to highlight the dangerously mounting risk - attacks tripled between 2016-2017 and [mobile account takeover attacks](https://www.javelinstrategy.com/press-release/consumers-increasingly-shoulder-burden-sophisticated-fraud-schemes-according-2019) increased again in 2018. Because fraudsters use genuine customer accounts with existing history, account takeover can be harder to detect than typical payment fraud, and can have a much higher impact on a business and its customers. Costs in the US were estimated at an eye-watering [$5.1 billion](https://www.javelinstrategy.com/press-release/identity-fraud-hits-all-time-high-167-million-us-victims-2017-according-new-javelin) in 2017. But it’s important to remember the cost of account takeover is not limited to chargebacks - they are just the tip of the iceberg. Under GDPR and other privacy laws, fines relating to customer data can be in the millions. In today’s world of seemingly endless data breaches, [90% of companies](https://www.vodafone.com/business/news-and-insights/press-release/global-vodafone-survey-shows-strong-cyber-security-helps-businesses-to-grow) say business security is a competitive differentiator and can help win new customers. When multiple customers are the victim of an account takeover, customers often [believe the merchant is insecure](https://www.newstatesman.com/spotlight/cyber/2019/05/how-tell-your-customers-you-ve-been-hacked), regardless of whether they were the source of the data breach or not. News of a hack spreads fast on social media, and this reputational damage can cause you to lose new/repeat business and lead to customers closing their accounts entirely. ## **2. Investigate the real impact of account takeover on your business** Talking about general statistics will only go so far - to get buy-in you need to relate to your own business. Look into instances of account takeover in your business. Find specific cases of customer complaints about their accounts being impacted on social media, investigate how this affected a real customer, listen to calls or read email complaints. Look into how long it took to resolve the issue across different teams and how the time impacted your response. ![Taskforce account takeover 1](https://storage.googleapis.com/ravelin-website-assets-production/assets/images/_1408xAUTO_crop_center-center_100_line_ns/52688/Taskforce-account-takeover-1.webp)## **3. Unite all the departments involved in a taskforce** Account takeover is not only one team’s problem - it impacts Marketing, Product, Risk and Sales/Customer Service. Any solution will need to get approved and agreed on by various different departments. Collaboration is key - create a taskforce to discuss possible solutions that work for your business. Make sure everyone understands why the issue is so important - by using the examples and statistics above. ## **4. Understand different teams' priorities and talk about what matters to them** As well as including different departments in the conversation, you also need to speak in their language. Speak about the aspects of account takeover that matter to them. - The **Marketing and Product team** want to make it easy for customers to sign up easily and make orders - but equally, understand it’s much easier to get an order from an existing customer than from a new customer. Marketing also understands the lifetime value of each of your customers. - **Executive Boards and Communications teams** consider business reputation critical and want to avoid bad press related to an account takeover. - If you’re working in Europe or anywhere with privacy laws, **Risk and Compliance teams** will want to protect your business from fines and scrutiny as a result of having to disclose data breaches and account takeover attempts. Linking the risks of account takeover back to the goals of each department will help you get teams engaged to find a solution. We hope you find these tips useful when opening the discussion on account takeover. **Learn more about [Ravelin's account takeover prevention solution](https://www.ravelin.com/solutions/account-security).** ## Author ![Jessica Allen](https://storage.googleapis.com/ravelin-website-assets-production/assets/images/_avatarSmall/3491/Screen-Shot-2019-08-13-at-16.12.52.webp) Jessica AllenHead of Content (Ravelin alumna) Jessica previously served as Head of Content at Ravelin. [More from this author](https://www.ravelin.com/author/jessica-allen) ## Related content [Blog / Press release ### Driven by AI, customers now rival criminals for ecommerce fraud, say merchants Global ecommerce fraud enters a new phase as losses continue to climb. Merchants now view criminals and their own customers as presenting a comparable risk, and there's a gap in AI adoption. ![Ravelin Symbol Blue 1](https://storage.googleapis.com/ravelin-website-assets-production/assets/images/_33x33_crop_center-center_none_ns/187712/Ravelin-Symbol-Blue-1.webp)Ravelin Technology](https://www.ravelin.com/blog/ravelin-fraud-survey-2026-press-release) [Blog / Payments & payment fraud ### Safeguarding agentic commerce – fraud strategy advice by Ravelin's CPO "If there’s anything fraudsters like, it’s a new thing." Here's how to protect your online shop from agentic commerce fraud – which can target you no matter whether you're actively adopting AI shopping or not. ![RAVELIN STAFF Mark Barlow Head Of product website](https://storage.googleapis.com/ravelin-website-assets-production/assets/images/_33x33_crop_center-center_none_ns/175066/RAVELIN_STAFF_Mark_Barlow_Head_Of_product_website.webp)Mark Barlow,Chief Product Officer](https://www.ravelin.com/blog/agentic-commerce-fraud-prevention-strategy-analysis) [Blog / Ravelin product ### Next-level reporting with Ravelin: Introducing Insights and AI-powered queries Discover how the new Insights section and AI-powered queries in the Ravelin Dashboard simplify your fraud reporting. ![Ashleigh](https://storage.googleapis.com/ravelin-website-assets-production/assets/images/_33x33_crop_center-center_none_ns/267519/ashleigh.webp)Ashleigh Luccini Gilera,Senior Product Marketing Manager](https://www.ravelin.com/blog/fraud-reporting-insights-ai-queries)