Look for these Red Flags

It’s easy to identify potential account takeover attempts at-a-glance. Watch out for:

  • Unexpected password reset emails or login notifications.
  • Messages asking you to confirm a one-time code you didn’t request.
  • Locked accounts or changed contact information without your action.
  • Unauthorized transfers or bill payments.

An Example That Hits Close to Home

Maria always logged in to her bank account using the same password she used for shopping and email. One of those retail websites suffered a data breach months earlier, and her credentials were stolen. Criminals tested the same username and password on her bank’s login and got in immediately. After changing her phone number and email in the profile, they locked Maria out and started scheduling transfers. It wasn’t until she tried to pay a bill online that she realized she no longer had access.

How to protect yourself

Variations on the scam

There are various ways criminals can take control of your account.

  • Credential stuffing: Stolen usernames and passwords are tested on multiple sites.
  • Phishing-assisted takeover: Victims send login details to a scammer via a fraudulent link.
  • SIM swap: Criminals hijack your phone number to intercept security codes.
  • Malware/keyloggers: Infected computers and phones silently capture credentials.

Related advice articles

Secure your accounts with confidence. These articles walk you through prevention and recovery.

More advice articles Default State Blue Right Pointing Arrow Hover State Orange Right Pointing Arrow

What to do if something happens

Even with strong habits, account takeover can happen. If you’re locked out or see activity you don’t recognize, don’t panic: quick action can stop the fraud.

  1. Change your password immediately and update your security questions if you can.
  2. Contact 1st Source right away through our Report Fraud page. We can help secure your accounts.
  3. Lock or freeze cards using card control in the mobile app until you’re confident everything is safe.
  4. Set up transaction and login alerts to keep a close eye on new activit
  5. File a report with the FTC at IdentityTheft.gov.

    6. It’s a free resource that helps you create a recovery plan.

In a nutshell

Account takeover scams rely on stolen credentials, but with the right habits, you can spot the warning signs and act fast. Protect your login details, watch for unusual notifications, and remember that we’re here to help if something ever happens.

Want to learn about other banking scams?

See our full list here:

Common scams and how to avoid them