My Account Was Hacked — What Should I Do?

Secure the email account linked to the service

Email controls password resets everywhere else. Reset it first, from a device you trust.

Change passwords from a trusted device

Use a device you believe is clean. Set a new unique passphrase generated by a password manager.

Enable MFA / 2FA

Prefer a passkey, security key or authenticator app over SMS. Save the recovery codes offline.

Sign out unknown sessions

Use the platform's 'sign out all devices' or active sessions page to cut the intruder off.

Remove unknown recovery emails and phone numbers

Attackers add their own recovery contacts so they can return after you reset.

Review connected applications

Revoke OAuth apps, integrations and API tokens you do not recognise.

Check mail forwarding and filter rules

Silent forwarding rules are the most common persistence trick on email accounts.

Review recent account activity

Check login history, device list, sent items, posts, transfers and profile changes.

Contact the platform's official support or recovery system

Use the provider's own recovery page — never a support number or chat found in a search ad.

Secure other accounts that reused the same password

Assume any account sharing that password is also at risk and change those next.

Scan your devices for malware

Run a full scan with reputable security software and install pending OS updates.

Preserve evidence

Keep suspicious emails with full headers, login notifications, screenshots and timestamps.

Contact financial institutions if money or card data may be exposed

Ask about freezing cards, reversing transactions and adding fraud monitoring.

Report fraud or cybercrime to the appropriate authorities

Report locally where applicable — many jurisdictions have a dedicated cybercrime portal.