Episode
Two Victims, One Session: Unmasking the New Age of Account Takeovers & Agentic AI
- Published
- Feb 24, 2026
- Duration seconds
- 1093
- Processing state
not_requested
Actions
POST https://stenobird.com/v1/public/podcasts/fraudology-podcast-with-karisse-hendrick-1368872/episodes/two-victims-one-session-unmasking-the-new-age-of-account-takeovers-agentic-ai/transcription-requests
Idempotently request low-priority transcript generation for this episode.GET https://stenobird.com/podcast/fraudology-podcast-with-karisse-hendrick-1368872/two-victims-one-session-unmasking-the-new-age-of-account-takeovers-agentic-ai.md
Read the agent-friendly Markdown representation of this episode resource.
Summary
Fraudology is presented by Sardine . Request a 1:1 product demo at sardine.ai In this solo episode, Karisse Hendrick checks in from a hotel room in San Diego at the Merchant Advisory Group (MAG) conference to share urgent intelligence from the front lines of e-commerce fraud before the full chaos of conference season begins. First, Karisse explores two sophisticated new fraud trends that are leaving even seasoned investigators scratching their heads. She breaks down the rise of the "Two-Victim ATO," a unique spin on account takeover where fraudsters leverage the "legacy" and trust of an active account to bypass security, only to hit it with a completely different person's stolen credit card. Then, she dives into a high-tech trend hitting digital gift card retailers: Malware-driven session hijacking . Karisse discusses how fraudsters "piggyback" on a legitimate customer's active session and device to commit a second, high-value theft—making it nearly impossible for traditional fraud systems to flag as a separate entity. Later in the episode, Karisse discusses the "scary" new frontier of Agentic AI . She shares insights from recent tests by major retailers showing that autonomous shopping bots are beginning to make purchases that are currently indistinguishable from human behavior , creating a massive "Know Your Agent" (KYA) challenge for the industry. In this episode, we discuss: The Two-Victim ATO: Why fraudsters are adding new payment methods to active, high-history accounts instead of just using cards on file. Session Hijacking & Malware: How bad actors are using VPNs and malware to "replay" or continue a legitimate customer's session to buy high-value gift cards. Agentic AI & KYA: The difficulty in identifying AI-initiated transactions and why current device…