UK Cybercrime Journal: Argos Account Takeover Fraud

Police and fraud-monitoring services have observed a sharp rise in Argos account-takeover fraud driven by credential stuffing using leaked credentials; criminals place orders online and retrieve goods via Click & Collect (often using payment details not tied to the account holder), with BNPL abused in some cases. The alert highlights rapid growth in reports (a 323% spike in May), explains attacker tactics and causes (password reuse, lack of MFA), and recommends user hygiene, payment monitoring, click-and-collect controls, and detection measures for retailers.