Q2 Report Finds Credential Phishing Accounts for 55.2% of Account Takeover Signals

Q2 Holdings released an account takeover report analyzing 199 U.S. financial institutions from early June through early August 2026. Credential phishing accounted for 55.2% of detected account takeover signals, as generative AI lowered barriers to creating convincing phishing attacks. Median fraud amounts involving bypassed dual-approval controls exceeded the median for other fraud by more than 13 times, highlighting outsized commercial risk. Mule account activity appeared twice as frequently at credit unions as at banks, showing differences in fraud exposure by institution type. Account takeover losses exceeded $15 billion in 2025, making it the costliest fraud category, according to Javelin Strategy and Research. Disclaimer: This news brief was created by Public Technologies (PUBT) using generative artificial intelligence. While PUBT strives to provide accurate and timely information, this AI-generated content is for informational purposes only and should not be interpreted as financial, investment, or legal advice. Q2 Holdings Inc. published the original content used to generate this news brief via (Ref. ID: 202610141000BIZWIRE_USPR_____20261014_BW205817) on October 14, 2026, an