A fraudster is MOST LIKELY to take which of the following actions during an account...

The correct answer is B. In an account takeover scheme, a fraudster gains unauthorized access to a legitimate user’s account and then exploits the account for financial gain. A common method is to use stored payment card information, bank information, loyalty points, or other account credentials to place unauthorized orders or transfer value. Option A is not the best answer because fraudsters more commonly change credentials, delivery details, or security settings to maintain control, rather than merely disabling multifactor authentication immediately. Option C is incorrect because account takeover attempts often involve repeated credential stuffing or automated attacks. Option D is also unlikely because fraudsters often change contact information to intercept alerts or lock out the true account holder. Account takeover is identified in the ACFE material as an online and mobile account fraud risk.

================