Cyber/Fraud Immersions

Attacking The Merchant

See how attackers steal credentials and learn practical steps to prevent account takeover and protect payments.

  • 60min | in-person or virtual delivery
  • Modules

Attacking The Merchant

towfiqu-barbhuiya-em5w9_xj3uu-unsplash

About the Session

Merchants are a prime target for credential theft. This session shows how attackers trick staff and customers, steal logins for admin consoles and payment gateways, and turn access into fraud and disruption. You’ll follow real attack paths, phishing, spoofed sites, MFA fatigue, malware and credential stuffing, and map each one to defences you can apply immediately. You’ll also explore how to work with security teams to strengthen controls, embed security by design and keep payments flowing.

What you’ll learn

In this immersive experience, you’ll:

– Understand common credential theft techniques and how they lead to account takeover

– See how merchant portals, e-commerce platforms and payment systems are targeted

– Learn practical controls such as phishing-resistant MFA, password managers and domain protection

– Practise a short response drill covering containment, resets, notifications and evidence capture

Why it matters

A single compromised account can expose customer data, enable fraudulent refunds and halt payments. Knowing how attackers work builds vigilance across your team, reduces risk, spots warning signs early and speeds up recovery when incidents occur.

Who’s it for

Anyone working in retail, e-commerce or payments who needs to understand and reduce the risk of credential theft and account takeover. No deep technical background required. No deep technical background required.

Outcomes

By the end of the immersion, you’ll be able to:

– Clearly explain how credential theft leads to account takeover in a merchant environment

– Identify the highest-risk access points and prioritise controls to protect them

– Apply practical measures including MFA choices, role-based access and verification checks for sensitive requests

Build knowledge that strengthens your organisation’s overall cybersecurity resilience

Why Decoded

We’ve introduced thousands of people to complex cyber topics, helping them connect the big picture to their day-to-day work. Our facilitators use live demos and current case studies to turn insight into actions you can take immediately.

Start the conversation

If you’re ready to turn Data and AI into results, leave your details and we’ll recommend the right programme for your goals and team.

Join us for our latest free learning session: Vibe Coding - Turn Ideas Into Working Software with AI.

X