Account Takeover Attacks Surge 122% in Fintech as Agentic Commerce Adoption Looms

Sift, the AI-powered fraud platform delivering identity trust for leading global businesses, released its Q3 2025 Digital Trust Index revealing account takeover (ATO) attacks targeting the fintech and finance industry have surged 122% year-over-year. Travel and ticketing platforms also faced significant increases with a 56% year-over-year rise in attacks, as fraudsters target accounts rich with loyalty points, stored payment methods, and personal data.

Despite a measurable increase in ATO attack rates, consumer awareness of account takeover remains low. While 14% of consumers report experiencing an ATO in the past year, the actual impact is likely much higher—many victims fail to recognize when their accounts have been compromised. In fact, ATO fraud losses are projected to climb to $17 billion in 2025, up from $13 billion in 2024.

Consumer behavior also reveals a disconnect between awareness and action when it comes to account security. While 77% of consumers are most worried about their banking and credit card accounts being hacked, nearly one in four admitted to reusing a password they knew had been compromised. This gap between concern and security practices leaves consumers vulnerable to ATOs across all account types.

AI commerce agents will intensify this challenge, as fraudsters leverage these tools to automate and scale account takeover attacks at unprecedented speed. Gartner predicts that within two years, AI agents will halve the time attackers need to hijack exposed accounts by automating key steps of ATO attacks.

Sift’s report also highlights the growing threat of agentic AI in fraud, raising questions about consumer trust in AI-managed purchases and financial information; 74% of people express concern that AI-powered shopping agents could lead to ATOs. Further, only 14% would let an AI make purchases. But trust varies by generation: 50% of Millennials and 48% of Gen Z are comfortable with AI managing purchases and finances, compared to just 31% of Gen X and 15% of Baby Boomers.

While 60% of consumers believe ATO prevention is a shared responsibility between users and businesses, companies are ultimately held accountable when protections fall short. The business implications of these trends are serious; 75% of consumers say they would stop using a site after experiencing an account takeover. Meanwhile, 87% would share their negative experience with others, amplifying reputational damage for affected businesses.

“We’re witnessing a perfect storm in digital fraud: attackers concentrating on high-value targets while gaining access to AI tools that accelerate their methods,” said Kevin Lee, SVP of Customer Experience, Trust & Safety at Sift. “While this surge in ATOs shows fraudsters are becoming more strategic and efficient, businesses must step up to meet the next generation of threats. Companies that understand how quickly fraud is evolving will be better positioned to protect their customers, establish identity trust, and grow profitably.”

The full findings from Sift’s Q3 2025 Digital Trust Index are available here.