Q2 Report Highlights Rising Account Takeover Fraud Risks in Digital…

Event summary

Q2 Holdings released a fraud intelligence report analyzing account takeover signals across 199 U.S. financial institutions.
Credential phishing accounted for 55.2% of detected account takeover signals, driven by generative AI lowering barriers to entry.
Mule account activity was twice as prevalent in credit unions compared to banks.
Dual Approval Bypass fraud had a median loss 13x higher than other fraud types.
Data was collected from early June to early August 2026 using Q2's User Activity Monitoring product.

The big picture

Account takeover fraud remains a costly and evolving threat, with losses exceeding $15 billion in 2025. Q2's report underscores the need for financial institutions to adopt behavioral signal monitoring to detect sophisticated, multi-stage attacks. The findings highlight the growing importance of tailored fraud prevention strategies, as institution size and charter type significantly influence exposure to different threats.

What we're watching

Fraud Evolution: How generative AI will continue to reshape fraud tactics and defense strategies.
Institutional Vulnerability: Whether credit unions can adapt their fraud prevention measures to address higher mule account activity.
Regulatory Scrutiny: The pace at which regulators will demand standardized fraud reporting and prevention protocols.