Signs of a Compromised Account – and What To Do Next
With cyber crime on the rise, it can be helpful to be protect the security of your personal accounts. Think about it: in some ways your email as just as important as your bank account because that’s where password reset emails go. Social media security is important too; this protects you from impersonation in a time where it can be difficult to contact social media support.
So what are some of the signs that your account might have been compromised? And what can you do next?
Signs Your Bank Account May Be Compromised
Unexplained Transactions
Check your bank statements regularly. If you see any charges or transfers you don’t recognize, it could mean your account was compromised.
Account Lockouts
If you suddenly can’t log into your online banking account, that could mean someone is trying to access it.
Alert Notifications
Most banks send alerts via email or text for large withdrawals, login attempts from new locations, or other unusual activities. If you receive these alerts and didn’t make the transaction, that may be a sign worth taking note of.
Changes to Your Account Details
Make sure your contact details (like your email, phone number, or mailing address) have not been changed to something you don’t recognize. Unfamiliar, new payees may also be an indicator.
Missing Money
If your balance suddenly drops, that may be a sign your account was compromised.
What to Do:
Contact Your Bank Immediately
If you notice any of these signs, report them to your bank right away. They can freeze your account, investigate, and help you secure it.
Change Passwords & PINs
Update your online banking login and PIN to something secure, using a different password for every account that you have. It’s ok to write them down and keep them somewhere safe.
Monitor Your Account
Keep an eye on your bank statements and transactions to spot any other suspicious activity.
Make a Report
If money has been taken out of your account by a remote attacker this is cyber crime; in Ireland you can report to your local Garda station and request a Pulse ID to track the case.
Signs Your Facebook or Instagram Account Might Be Compromised:
Password Changes or Login Alerts
If you receive an email or notification saying your password or account details have changed, it may be time to look into this further.
Unrecognized Devices or Locations
Facebook and Instagram show a list of devices and locations where your account is logged in, under Settings. If you see unfamiliar devices or locations, it could mean someone else has accessed your account.
Friend Requests or Messages You Didn’t Send
If your account is sending friend requests, messages, or other interactions that you didn’t initiate, it’s a sign that someone might be controlling your account.
What To Do:
Change Your Password
- Immediately change your password to something strong and unique. Try using a passphrase like, “My favorite number = 147”. Make sure it’s different from passwords you use on other accounts and feel free to write it down and keep it somewhere safe if you need to.
- If you can’t log in, use the “Forgot Password” feature to reset it.
- If you still can’t access your account, use Facebook’s “Account Recovery” tool.
Enable Two-Factor Authentication (2FA)
- Turn on two-factor authentication on both Facebook and Instagram. This means even if someone has your password, they will also need access to your phone or email to log in. Remember, your social media is almost like an online ID – security matters!
- For Facebook: Go to Settings > Security and Login > Use two-factor authentication.
- For Instagram: Go to Settings > Security > Two-Factor Authentication.
Review Account Activity
- Check your login history to see if there are any unfamiliar devices or locations:
- For Facebook: Go to Settings > Security and Login > Where You’re Logged In.
- For Instagram: Go to Settings > Security > Login Activity.
- If you see anything suspicious, log out of those sessions.
Log Out of All Devices
- If you think your account is compromised, log out of all devices. This will force anyone who’s logged in without your permission to be signed out.
- For Facebook: Go to Settings > Security and Login > Where You’re Logged In, then select “Log Out of All Sessions.”
- For Instagram: Go to Settings > Security > Login Activity, then log out of any unfamiliar sessions.
Check Email and Account Recovery Options
- Make sure the email address associated with your account is correct. If it’s changed or if you see emails you didn’t receive, revert them to your correct email.
- For Facebook: If someone changed your email, Facebook should send a notification, and you can revert it back via the account recovery page.
- For Instagram: If someone changed your email or phone number, Instagram will send an email with a link to reverse those changes.
Signs Your Email Might Have Been Compromised:
Inability to Log In
As with all online logins, if you’re suddenly unable to log into your account because the password has been changed, or you don’t recognize the email address linked to your account, it could be a sign someone else has taken control.
Unfamiliar Emails in Your Sent Folder
Much like with social media, unfamiliar messages in your sent folder may be an indicator someone else has access.
Unusual Activity or Login Alerts
Many email providers (like Gmail, Yahoo, or Outlook) send you alerts if they detect logins from unusual locations or devices. These alerts might point to a compromise.
Password or Account Setting Changes
If you receive notifications that your password or account settings (like recovery email or phone number) were changed and you didn’t make those changes, that’s a sign you may need to secure your account.
What to Do to Next:
Change Your Password
- Immediately change your password to something strong and unique. As we recommended above, you can try using a passphrase like, “The 77 bus is always late!”. Make sure it’s different from passwords you use on other accounts and feel free to write it down and keep it somewhere safe if you need to.
Enable Two-Factor Authentication (2FA)
- Two-factor authentication adds an extra layer of security. Even if someone gets your password, they won’t be able to log in without a second code, which is usually sent to your phone.
- For Gmail: Go to Google Account > Security > 2-Step Verification.
- For Yahoo: Go to Account Security > Two-step Verification.
- For Outlook: Go to Microsoft Account > Security > Two-step Verification.
Check Your Account’s Activity
- Look for any signs of strange activity:
- For Gmail: Go to your Google Account, select “Security,” and look at “Recent security events” and “Your devices.”
- For Outlook: Go to your Microsoft account, check “Recent activity” under “Security & Privacy.”
- For Yahoo: Go to Account Security and check “Recent activity.”
- If you see anything unfamiliar, like logins from unusual locations or devices, sign out of all sessions and change your password.
Review Account Recovery Information
- Check that your recovery email and phone number are still correct. If the hacker changed them, update them back to your information.
- For Gmail: Go to Google Account > Personal Info > Contact Info.
- For Outlook: Go to Microsoft Account > Security > Update Info.
- For Yahoo: Go to Account Security > Account Recovery.
Log Out of All Devices
- Log out of your email account on all devices to remove anyone who might be logged in without your permission.
- For Gmail: Go to “Last account activity” at the bottom of your inbox and click “Sign out of all other web sessions.”
- For Outlook: Go to your Microsoft account > Security > More Security Settings > “Sign me out of all devices.”
- For Yahoo: Go to Account Security > Sign out from all devices.
This is just to get you started on some ways to spot compromised accounts and some steps to follow after. Remember, always use a different password for each account. If you still need help, try our Support Near Me tool to find a digital educator near you.