Calm first steps for protecting an online account.
- Use a device you trust and open the provider’s official app or type its known website address yourself. Do not use a link from the warning message.
- Change the password to a new, unique one. Sign out other sessions if the provider offers that option, then turn on two-step verification (an extra sign-in check after your password).
- Check the recovery phone number, recovery email, forwarding rules, and recent activity. Remove changes or devices you do not recognize.
- If money or payment details may be involved, contact the bank or card issuer using the number on the card or statement. Tell contacts if the account sent messages without you.
- Keep copies of relevant alerts and report the incident through the provider’s official support channel. Do not pay someone who promises guaranteed account recovery.
Official Resources: CISA account security guidance