I Think I've Been Hacked — What to Do First

I Think I've Been Hacked — What to Do First

If you suspect one of your accounts or devices has been compromised, the first hour matters. Don't panic — work the checklist below in order. It's written so you can act even while you're still not 100% sure.

First, the warning signs

You may have been hacked if you notice:

  • Login alerts, password-reset emails, or sign-in codes you didn't request.
  • You're suddenly locked out of an account, or its password no longer works.
  • Friends receive messages or posts from you that you never sent.
  • Unfamiliar charges, or new payees / forwarding rules you didn't set up.
  • Your device is slow, overheating, showing pop-ups, or has apps you don't recognize.

Do these first — in this order

1. Secure your email before anything else

Your email is the master key: whoever controls it can reset every other account. Start here. Change the email password to something new and unique, sign out all active sessions, and turn on two-factor authentication. Then check for sneaky forwarding rules or filters the attacker may have added to quietly read your mail.

2. Change passwords on the important accounts

Next, bank and finance, then anything that stores money or card details, then social media. Make each password different. If you reused one password across sites, every site that shared it is now at risk — change them all.

3. Turn on two-factor authentication (2FA)

Add 2FA everywhere it's offered, prioritizing email, banking, and social accounts. An authenticator app is stronger than SMS codes. This alone blocks most account takeovers, even if your password leaks again later.

4. If money or cards are involved, call your bank now

Use the number on the back of your card — not one from any message. Report the compromise, watch for unfamiliar transactions, and freeze or replace the card if needed.

5. Clean the device

Run a full scan with a reputable security app. Remove apps and browser extensions you don't recognize. Install pending system and app updates. If problems persist, back up your important files and consider a factory reset.

6. Warn the people in your contacts

If your account was sending scam messages, tell your contacts not to click anything they received from you while it was compromised. This stops the attack from spreading through people who trust you.

How this usually happens — so it doesn't happen again

Most personal hacks trace back to one of three things: a reused password exposed in a data breach, a phishing link, or a fake text. You can close all three:

Want to be the person who cleans this up for a living?

Incident response — containing a breach and getting people back to safe — is a real career. It starts with fundamentals like CompTIA Security+ and grows into blue-team paths like CySA+. See the exam-prep paths on CertInstructor →

Written by the team at Security365 / CertInstructor — 20+ years training cybersecurity professionals, holders of the full CompTIA security certification stack, and recipients of the EC-Council Instructor Circle of Excellence Award (two years running).

Comments

Post a Comment

Popular posts from this blog

CompTIA Security+ PBQs: What Performance-Based Questions Are and How to Prepare

CompTIA Security+ PBQs: What Performance-Based Questions Are and How to Prepare Ask anyone who failed Security+ by a few points what got them, and the answer is usually the same: the performance-based questions. PBQs are the part of SY0-701 that catches readers off guard — and they're also the most beatable, once you know how they work and prepare the right way. What a PBQ actually is A performance-based question isn't multiple choice. It's an interactive simulation that drops you into a scenario and makes you do something: configure a firewall rule, match attacks to defenses, read a log and identify the incident, set permissions, or complete a task in a simulated interface. Instead of asking whether you know a concept, it checks whether you can apply it. Why they decide pass/fail They're weighted heavily. A single PBQ can be worth several multiple-choice questions. They come early. PBQs usually appear in the first few questions — right when nerves a...
Read more

How to Study for CompTIA Security+ (SY0-701): A Realistic Plan

How to Study for CompTIA Security+ (SY0-701): A Realistic Plan Security+ is very passable — but not by reading alone the night before. The candidates who clear it on the first try almost always follow the same three-phase rhythm: learn the material, practice it hands-on, then confirm they're ready before booking. Here's how to run that plan for the current SY0-701 exam without wasting money or time. Know what you're walking into SY0-701 is up to 90 questions in 90 minutes, and you need a scaled score of 750 out of 900 to pass. The questions come from five weighted domains, with Security Operations the largest. Crucially, a handful are performance-based questions (PBQs) — hands-on simulations that usually appear early and carry real weight. That single fact shapes the whole study plan: you can't pass on memorization. Phase 1 — Learn the material Start by working through every objective in order, building the vocabulary and mental model. This is what a self-p...
Read more

Fake Bank & Shipping Websites: How the Scam Works

Fake Bank & Shipping Websites: How the Scam Works Two kinds of brands get impersonated more than any other: banks and delivery companies . Almost everyone has an account with one and a parcel from the other, so the messages feel plausible — and that's exactly why they work. Here's how each scam is built, step by step, and how to shut it down before it costs you anything. The fake bank scam It usually starts with a message that manufactures fear: "Suspicious login detected," "Your account is locked," "Verify your identity to avoid suspension." The message carries a link to a page that is a near-perfect copy of your bank's login screen. Here's the machinery behind it: The bait: an urgent SMS or email with a link. The domain is a look-alike — something like yourbank-secure.com or yourbank.verify-account.xyz , not the bank's real address. The trap: you type your username and password into the fake page. It's capt...
Read more