Which factor most enables account takeover schemes?

• A. The increased use of multi-factor authentication
• B. Payment accounts offering the ability to be notified when accessed or changed
• C. Consumers using the same login and password information on multiple accounts
• D. Customers regularly checking online accounts for changes

Answer: (C)

Reusing the same login and password across multiple sites creates a single point of failure. If one service is breached and the password is stolen, the attacker can try that same credential on other accounts and often gain access, leading to account takeover. This is the most direct way an attacker can expand access across services, which is why credential reuse is the key factor enabling takeover schemes. In contrast, stronger measures like multi-factor authentication, notifications of access, or users regularly checking accounts help prevent or detect takeovers rather than enable them. To reduce risk, use unique passwords for every site and enable MFA whenever possible.