- link Copy URL
- [     Share on X ](https://twitter.com/intent/tweet?text=What Is Corporate Account Takeover? KeyBank Explains the Risks and How Businesses Can Help Prevent Fraud https://www.3blmedia.com/markdownify/node/1317626?absolute=1&via=3blnews "Share on X")
- [  Share on linkedin ](https://www.linkedin.com/shareArticle?mini=true&url=https://www.3blmedia.com/markdownify/node/1317626?absolute=1 "Share on Linkedin")
- [  Share on facebook ](https://www.facebook.com/sharer/sharer.php?u=https://www.3blmedia.com/markdownify/node/1317626?absolute=1 "Share on Facebook")
- [ email Share via email ](mailto:?subject=What Is Corporate Account Takeover? KeyBank Explains the Risks and How Businesses Can Help Prevent Fraud&body=ESG News from KeyBank https://www.3blmedia.com/markdownify/node/1317626?absolute=1 "Share via email")
 
 

 [Corporate Responsibility](/categories/corporate-responsibility)

 # What Is Corporate Account Takeover? KeyBank Explains the Risks and How Businesses Can Help Prevent Fraud

 

##### Cybercriminals are increasingly targeting business bank accounts through sophisticated social engineering schemes

 

 

 Jul 23, 2026 9:00 AM ET

  Campaign:  [KeyBank Fraud Protection Center](/news/campaign/keybank-fraud-protection-center)  ![KeyBank location](https://3blaws.s3.amazonaws.com/styles/carousel_2x/s3/2026-07/corporate-account-takeover_KEYBANK_072226_1784749041.png)

 

 

Business owners face a growing threat from corporate account takeover (CAT) scams, a type of fraud in which criminals gain unauthorized access to company bank accounts and initiate fraudulent transactions. Financial institutions, including [KeyBank](https://www.key.com/personal/index.jsp), and cybersecurity professionals warn that these attacks are becoming more sophisticated, often combining technology with psychological manipulation to target employees and business leaders.

Corporate account takeover scams can lead to significant financial losses, operational disruption, and reputational damage. In some cases, fraudsters are able to move funds from business accounts within minutes of gaining access.

**How Corporate Account Takeover Works**

Corporate account takeover occurs when criminals obtain access to a business’s online banking credentials or banking systems. Fraudsters commonly use phone calls, emails, text messages, or fraudulent websites to trick employees into sharing sensitive information, downloading malicious software, or authorizing payments.

“Most account takeovers start with one thing: manufactured urgency. This could take shape as a frantic phone call, an email labeled ‘high Importance,’ or a fake website link that looks like the real thing,” said John Carney, Head of Commercial Operational Risk at KeyBank. “If you feel at all uncertain or suspicious about any communication you receive regarding any of your accounts, slow down, call your banker, and authenticate everything. Don’t let someone else’s false urgency cost your business money.”

Another increasingly common tactic involves phishing websites that closely resemble legitimate bank login pages. Unsuspecting users who enter their credentials on these sites may unknowingly provide fraudsters with direct access to company accounts.

Cybercriminals may also attempt to establish remote access to computers or mobile devices, enabling them to observe banking activity and conduct unauthorized transactions.

**A Business Example**

One scenario that shows how CAT could be executed involves a business owner who received a phone call from an individual claiming to represent the owner’s bank. The caller stated there was an issue with the company's account and instructed the owner to provide login credentials to resolve the problem. The criminal then uses the access to transfer a substantial amount of money from the business account.

This highlights how some CAT scams often rely on trust and urgency rather than technical hacking alone.

**Steps Businesses Can Take to Reduce Risk**

While no organization is immune from cybercrime, financial security experts recommend several measures to help protect against account takeover schemes.

- **Educate Employees**  
    Employee awareness is one of the strongest defenses against fraud. Businesses should provide regular cybersecurity and fraud-prevention training to help staff recognize phishing attempts, suspicious phone calls, and social engineering tactics.
- **Verify Identities Independently**  
    Unexpected requests for passwords, account details, software downloads, or payment authorization should be treated with caution. Businesses should independently verify the identity of any individual requesting sensitive information by using trusted contact information rather than links or phone numbers provided during the interaction.
- **Strengthen Authentication**  
    Companies should use strong, unique passwords for online banking and financial systems. Multifactor authentication (MFA), biometric authentication, and other layered security measures can provide additional protection against unauthorized access.
- **Access Banking Platforms Directly**  
    Fraud prevention specialists advise businesses to navigate directly to their financial institution’s website by typing the web address into their browser. Users should avoid clicking links from unsolicited emails, text messages, or online advertisements and should not rely on search engine results when accessing online banking services.
- **Monitor Accounts Frequently**  
    Regularly reviewing account activity can help businesses identify unusual transactions early and respond before additional losses occur.
- **Consider Cyber Insurance**  
    Cyber insurance policies may help offset financial losses associated with fraud, cyberattacks, and data breaches. Businesses should consult with insurance professionals to determine whether coverage aligns with their risk profile.

**What to Do If You Suspect a Scam**

Time is critical when responding to a suspected corporate account takeover incident.

Businesses that believe they have been targeted should immediately:

- Contact their bank’s fraud department.
- Request that affected accounts be reviewed or restricted if necessary.
- Change online banking passwords and other potentially compromised credentials.
- Review account activity for unauthorized transactions.
- Monitor business credit reports and related financial records for signs of fraudulent activity.

For KeyBank clients, suspected fraud should be reported immediately to the Fraud Client Service Center at **1-800-433-0124** or **711 for TTY/TRS services**.

**Acting Quickly Can Limit Losses**

As cybercriminals continue to refine their tactics, businesses of all sizes face increased exposure to corporate account takeover scams. Experts say that employee education, cautious verification practices, strong authentication controls, and rapid incident reporting remain among the most effective ways to reduce risk and limit financial losses.

Organizations that build a culture of cybersecurity awareness are better positioned to recognize threats before they become costly incidents.

Stay up to date on the latest scams, common hoaxes, and fraud trends at [key.com/fraud](https://www.key.com/about/security/fraud.html).

This material is provided as general information only; the information contained herein may not apply to all situations. Nothing in this material shall be regarded as an offer or solicitation by KeyBank or its affiliates. This is not intended to be a recommendation or advice for your specific situation (including financial, accounting, legal, or tax advice). Consult appropriate professionals for your specific circumstances.

©2026 KeyCorp®. All rights reserved. KeyBank Member FDIC. CFMA 260720-4749128



 

 

 

 

 

 

 

 [![KeyBank Logo](/sites/default/files/Clients/Screen_Shot_2016-05-13_at_10.27.28_AM.png)](/profiles/keybank)

 



 

### More from KeyBank

###### [KeyBank and the Buffalo Sabres Foster the Spirit of Giving During Give 716 Celebration](/news/keybank-and-buffalo-sabres-foster-spirit-giving-during-give-716-celebration)

 Jul 17, 2026 11:15 AM ET

  



###### [KeyBank Foundation Awards $300,000 to Cities for Financial Empowerment Fund to Expand Youth Banking Access and Financial Education Nationwide](/news/keybank-foundation-awards-300000-cities-financial-empowerment-fund-expand-youth-banking-access)

 Jul 16, 2026 9:00 AM ET

  



###### [Cleveland WNBA Announces KeyBank As First Founding Partner](/news/cleveland-wnba-announces-keybank-first-founding-partner)

 Jul 14, 2026 7:15 AM ET

  



###### [KeyBank Sets a New Standard in Check Fraud Protection With Check Control for Business](/news/keybank-sets-new-standard-check-fraud-protection-check-control-business)

 Jul 9, 2026 9:00 AM ET

  



###### [KeyBank Leverages NHL and NBA Playoff Momentum To Strengthen Brand, Community Ties](/news/keybank-leverages-nhl-and-nba-playoff-momentum-strengthen-brand-community-ties)

 Jul 2, 2026 9:00 AM ET

  



###### [Key4Women to Host Free Webinar Focused on Women’s Mental Health and Self-Understanding](/news/key4women-host-free-webinar-focused-womens-mental-health-and-self-understanding)

 Jul 1, 2026 9:00 AM ET

  



###### [KeyBank Provides $56 Million of Financing for Affordable Senior Housing in Ohio](/news/keybank-provides-56-million-financing-affordable-senior-housing-ohio)

 Jun 30, 2026 9:30 AM ET

  



###### [KeyBank Advances Women’s Health Through Financial Empowerment at Cleveland Clinic Global Forum](/news/keybank-advances-womens-health-through-financial-empowerment-cleveland-clinic-global-forum)

 Jun 26, 2026 9:00 AM ET