A scammer gaining full control of one of your accounts — email, job board, or bank — usually via stolen or phished credentials.
Account takeover is often the endgame of a job scam: harvested credentials or a remote-access session let the attacker seize your email, job-board, or banking account. From there they reset other passwords, redirect paychecks, or impersonate you to your contacts.
Unique passwords, a password manager, and two-factor authentication are the core defenses against ATO.
Red flags
- Unexpected password-reset or login-alert emails
- Being logged out or locked out without cause
- Contacts receiving messages you didn't send
Deep-dive guide
Job Board Credential Phishing: Fake Login Pages That Steal Your Accounts
Frequently asked questions
What should I do if my account is taken over?
Regain access and change the password immediately, enable two-factor authentication, sign out all sessions, and check for changed recovery details or forwarding rules. Then secure any other account that shared the same password.