Hacked accounts
I've lost access to an account or noticed unusual activity.

What action should I take?
If you can't access your account or have noticed other unusual activity, you should:
Go to your account provider's website and search their help or support pages - they should explain the account recovery process in detail.
Check your email filters and forwarding rules. Cyber criminals are known to set up a forwarding rule to automatically receive a copy of all emails sent to your account, which could allow them to reset your passwords.
Look for information about how to do this on your email provider's website.
You should immediately change the password for the hacked account. It's also important to change the password for any accounts where you use the same password.
This is important because cyber criminals know people often use the same password for different accounts, and so will try the same 'hacked' password across multiple accounts. Use a strong and unique password, such as three random words.
When you have changed your passwords, make sure that you log out of the account on any devices and apps. You can usually do this in the 'settings' menus of the app or website, or if you can't find it there, in the 'privacy' or 'account' options.
This means a cyber criminal won't be able to use your old password to access your account.
Many online accounts and services allow you to set up two-step verification (2SV), which adds an extra layer of security and means that even if a criminal knows your password, they won't be able to access your account.
2SV usually works by sending you a PIN or code, usually by SMS or email, which you then enter to prove it's really you.
You should update your apps and devices as soon as updates are available. Installing security updates gives you protection, and also often include improvements and new features.
Installing updates is one of the most important things you can do to prevent your account from being hacked. Turn on 'automatic updates' in your device's settings, so you don't have to remember to do it.
Get in touch with contacts, friends or followers linked to the hacked account. Let them know that you were hacked, and warn them to be suspicious of any recent messages sent from your account. This will help them avoid being hacked themselves.
A hacked email account can lead to hacks elsewhere. Look out for unauthorised purchases, and check your bank accounts for unusual transactions.
You should also contact your bank directly for further support. Make sure you use the contact details from their official website or social media channels to ensure it's genuine.
If you’ve lost money, tell your bank straight away and report it to Report Fraud or in Scotland, contact Police Scotland.
Organisations
If your organisation has experienced a cyber incident and is based in the UK, you can report it.
If you can't recover your account
Sometimes it may not be possible to recover your account using the online service. In these cases, you'll have to create a new account if you want to continue using the service.
Once you've done this, it's important to give contacts your new details, and tell them you're no longer using the old account. Make sure you update any bank, supplier or store websites with your new details.
Further resources
For more information about how to prevent attacks like this in future, there is NCSC guidance to help you:


