Lesson 2 of 4 · Module 04

Respond to a Compromised Account

Unexpected sign-ins, reset notices, messages you did not send, or changed recovery details can indicate compromise. A calm sequence of actions can contain the damage.

8 min read · Beginner friendly

Regain control

On a trusted device, use the official app or website. Change the password, sign out other sessions, enable MFA, and review recovery methods, forwarding rules, connected apps, and recent activity.

Recover and learn

Change reused passwords elsewhere, tell contacts about scams sent from the account, and use the provider’s official recovery process if locked out.

  • Report fraudulent transactions promptly
  • Keep records when money or identity data is involved
  • Do not pay strangers promising instant recovery