Unauthorized device access has overtaken scams as a leading identity theft threat, exposing consumers to account takeovers, credential abuse, and interconnected fraud schemes.