When an account is taken over, speed matters, but frantic changes can make recovery harder. Start with the accounts that control other accounts and keep a short record of what you do.

1. Protect your primary email

Your email is often the recovery route for everything else.

  • Use a device you trust.
  • Change the email password to a unique, long password.
  • Review active sessions and sign out devices you do not recognise.
  • Check recovery email addresses, phone numbers, forwarding rules, and filters.
  • Turn on multi-factor authentication with an authenticator app or security key where possible.

If you cannot access the email account, use the provider's official recovery page. Do not pay anyone who claims they can bypass the provider.

2. Preserve useful evidence

Record the time you noticed the problem, alerts you received, unfamiliar sessions, and changes to recovery details. Screenshots can help, but redact unrelated personal details before sharing them.

Do not send passwords, one-time codes, backup codes, or live recovery links to anyone. Those items grant access; they are not evidence.

3. Secure connected accounts

Prioritise financial accounts, social platforms, cloud storage, and any account that reused the old password. Change passwords directly on the official website or app, then review sessions and authorised applications.

4. Use official recovery routes

Open the platform yourself rather than following links from unexpected messages. Explain what changed, when you lost access, and which recovery details were altered. Keep case numbers and copies of provider responses.

5. Warn affected people carefully

If the compromised account is sending messages, tell trusted contacts through a different verified channel. Ask them not to open links or send money. Avoid publicly sharing details that could help the attacker answer recovery questions.

When to escalate

Contact your bank immediately if payments or financial information may be affected. Contact the police or the appropriate emergency service if there are credible threats or immediate danger. Bucurie Digital provides defensive guidance and cannot guarantee that a platform will restore an account.