What should I do if my account has been hacked?
If your email account has been hacked, you should take immediate action to limit the damage and regain control of
your data. Here is a step-by-step guide:
1. Secure access immediately
- Change your password: If you can still log in, immediately change your password to a
strong, unique password.
- No longer have access? Use the "Forgot your password" feature to change your password.
- Enable two-factor authentication (2FA) to thwart attackers in the long term.
2. Security check
- Check your address details, recovery email and telephone number, as the attackers may have changed them.
- Generate a new forgotten password code and new backup codes, as these may have been copied or even recreated by the attackers.
- Check your filter rules as the attackers may have set up automatic forwarding to third-party email addresses.
3. Secure accounts linked to your email
- Check your bank, PayPal, social media and online shop accounts to see if any unauthorised logins
have taken place.
- And regardless of the outcome, immediately change your passwords everywhere your email is used as a login.
4. Check your devices
- Scan your computer and mobile phone for malware/viruses, as Trojans or keyloggers may be the cause of the hack.
5. Check contacts and damage
- Search your ‘Sent’ folder and ‘Inbox’ to see if any messages have been manipulated or deleted.
- Inform your contacts that their address has been misused (e.g. for spam or phishing).
