Signs to look for
- You cannot sign in.
- Security settings changed.
- Messages or payments appeared that you do not recognise.
- You received sign-in alerts from unfamiliar locations.
What to do
- Use the provider’s official account-recovery process.
- Check your email account first because it may be used to reset other passwords.
- Remove unfamiliar email forwarding rules, recovery addresses and devices.
- Change the password and any other account using the same password.
- Sign out every other session.
- Turn on an extra sign-in check.
- Warn contacts if messages were sent from the account.
Check bank and shopping accounts for unfamiliar activity. Contact the bank immediately if money is involved.