Legit or Scam
Technology & AI

Account Takeover (ATO)

Updated June 1, 2026Also called: ato, account hijacking

A scammer gaining full control of one of your accounts — email, job board, or bank — usually via stolen or phished credentials.

Account takeover is often the endgame of a job scam: harvested credentials or a remote-access session let the attacker seize your email, job-board, or banking account. From there they reset other passwords, redirect paychecks, or impersonate you to your contacts.

Unique passwords, a password manager, and two-factor authentication are the core defenses against ATO.

Red flags

  • Unexpected password-reset or login-alert emails
  • Being logged out or locked out without cause
  • Contacts receiving messages you didn't send

Deep-dive guide

Job Board Credential Phishing: Fake Login Pages That Steal Your Accounts

Frequently asked questions

What should I do if my account is taken over?

Regain access and change the password immediately, enable two-factor authentication, sign out all sessions, and check for changed recovery details or forwarding rules. Then secure any other account that shared the same password.

Related terms

Spot it before it costs you

Legit or Scam turns terms like this into instinct. Drop into real-world offers, recruiter DMs, and texts, and see how many you can call correctly.

Play Legit or Scam

Educational content only — not legal, financial, or security advice. Scenarios and company names are illustrative.