Account takeover.

In plain English

Account takeover is a form of fraud where someone gets your login, takes control of an account, and changes the password and contact details so you cannot get back in. They often start with a leaked password or a phishing message, then move money, make purchases, or use the account to attack your other accounts. Email is a common first target because it can reset passwords everywhere else. The strongest defenses are turning on two-factor authentication and using a different password for every account.

01Why it matters

Losing control of one account, especially email, can cascade into losing your bank, your shopping, and your identity, and clawing it all back is slow and stressful. Catching it early is the difference between a scare and a serious loss.

02The math, step by step

You stop receiving emails and find you are logged out of your bank. A criminal used a password you reused elsewhere to get into your email, then reset your bank login. Your first steps are to call the bank and email provider to lock the accounts, regain access, and change every reused password. Under Reg E, report the unauthorized transfers to your bank promptly so your liability is limited. You did nothing shameful here, this happens to careful people, and acting fast is what matters.

03What this is NOT

04Receipts

Every figure on this page is sourced to a primary document. Tap to open the original.