The infographic summarizes 2023 holiday-season API threats using six months of anonymized Cequence customer traffic (June to November 2023). Out of 154B total requests, 14% were automated and 12% were confirmed malicious, spanning 719M unique IPs and 148M different user agents, with a peak of 216M requests blocked in a single day. It highlights 325M account takeover attempts, up over 50% from the prior period, and notes attackers “play the long game,” shifting tactics across the year: scraping, loyalty, and payment fraud surged 700% in the second half, while add-to-cart spikes during high-demand drops showed many items added but few purchased. It also flags social-commerce “influencer” abuse, where account takeovers increased 410x as the year progressed, and recommends a Discover-Comply-Pr

Join for free to read