How to Report a Hacked Online Account

A compromised email, social, cloud, or marketplace account can expose other services. Use official recovery channels, secure linked accounts, and keep a record of suspicious activity.

Start with the account provider's official recovery process

Type the provider's known website address yourself or use its official app. Avoid recovery links sent by strangers. Follow identity verification instructions and secure the recovery email and phone number.

Secure connected accounts

From a trusted device, change reused passwords, enable multifactor authentication, revoke unfamiliar sessions, remove unknown forwarding rules or API keys, and review recovery methods.

Preserve alerts and activity

Save password-change alerts, login notifications, suspicious messages, account activity logs, recovery case numbers, and dates. Avoid deleting evidence before the provider or authority has advised you.

Check financial and identity exposure

If payment details, identity documents, or financial accounts may be affected, contact the relevant bank, issuer, or authority using verified channels. Consider additional protective measures appropriate to your jurisdiction.

Report the compromise

Use the provider's account-compromise reporting route and give concise facts, times, and evidence. Report fraud or threats to the relevant authority when appropriate.

Reduce recurrence

Use unique passwords with a reputable password manager, phishing-resistant multifactor authentication where available, and least-privilege access. Keep devices and recovery methods up to date.

Important: General educational information, not legal or financial advice. Outcomes depend on the facts and applicable law; no recovery or security result is guaranteed.