He explains that these accounts and compromised credentials act as the basis for multiple types of attacks, including:Loyalty and promo abuse. Attackers deploy shopping bots to buy up high-demand, limited-run inventory instantly using fake credentials, forcing physical retail shrinkage and massive digital cart abandonment losses. Using credential stuffing to take over trusted customer accounts, bad actors fabricate virtual receipts and process fraudulent returns directly to clean bank cards or untraceable gift cards. There’s also a disconnect between customer trust and perceived customer trust, further exacerbated when cyberattacks derail the trust that does exist. The entire session must be secured whether at a physical kiosk in a retail setting or online.