My account was hacked — what do I do?

Messages you didn’t send, a changed password, or you can’t log in? Someone may have taken over your account. Don’t panic — here are clear steps.

1. Try to recover the account

• Facebook: go to facebook.com/hacked.
• Instagram: go to instagram.com/hacked.
• Gmail / Google: go to g.co/recover.
• WhatsApp: re-register your number on your phone to kick the intruder out, then turn on “two-step verification”.

2. Once you are back in

1. Change the password to a new, strong one.
2. Change the password of the email linked to the account too.
3. Log out of every device and session you don’t recognise.
4. Turn on two-factor authentication.
5. Check the email and phone number on the account and remove anything that isn’t yours.
6. Remove connected apps you don’t recognise.

3. Warn people

Tell friends and family your account was hacked, so they don’t answer messages asking for money, photos or codes.

4. Document

Screenshot messages sent in your name and any changes to the account. If the intruder knows you or threatens you afterwards, you can report it or ask for technical support.

If the person is close to you and has access to your phone, do these steps from another, safe device.