Akamai: Latin America Leads High-Risk Logins

Latin America accounted for 37.8% of login attempts classified as high or critical risk in the period Akamai analyzed, the highest share among the regions mentioned in the report. The company also said the average duration of phishing campaigns dropped from 48 days in the fourth quarter of 2025 to 22 days in the second quarter of 2026.

What did Akamai show about logins?

Akamai said a significant share of the activity observed at the login stage was classified as high or critical risk. In Latin America, that share reached 37.8%, ahead of the other regions mentioned in the report.

The figure points to identity abuse and credential misuse as the core of the problem. In the same vein, a GlobeNewswire and Morningstar distribution attributed to Akamai said 26.6% of all recorded login attempts were classified as high or critical risk, although that material does not by itself confirm account takeovers or specific victims.

What changed in phishing?

According to Akamai, phishing campaigns became shorter over the measured period. Average duration fell from 48 days in the fourth quarter of 2025 to 22 days in the second quarter of 2026.

That change fits into a broader picture of digital fraud. Material distributed by GlobeNewswire and republished by Morningstar, citing Akamai, said global detections of online scams rose from about 3.2 million to 6.4 million year over year and surpassed traditional phishing for the first time in the first quarter of 2026.

What other signs of identity abuse did the report observe?

The distribution attributed to Akamai also said account verification requests accounted for 40% of high-risk traffic. That pattern suggests account validation before credential stuffing campaigns, but it does not amount to confirmation of successful access.

CXOToday framed the finding as a sign that attackers exploit the login stage as an entry point for account abuse. The same material added that, in APAC, banking and fintech together accounted for 12.5% of the observed activity, a regional figure that should not be extrapolated to Latin America.

What does the report mean for the region?

The report places Latin America at the top among the regions mentioned by share of high- or critical-risk login attempts. At the same time, the broader reading of the material points to identity impersonation, heavy credential use, and the expansion of direct fraud, with phishing losing relative weight over the period analyzed.