Something's wrong — a login alert you didn't expect, a password that suddenly doesn't work, a friend asking why you sent them a weird link. Here's what to actually do, in order, without panicking.
Email is usually the master key to everything else. Change that password immediately, even before checking what else might be affected.
Log into your bank and card accounts directly (never through a link from a message) and look for anything unfamiliar. Call your bank's fraud line if anything looks wrong.
Most email and social accounts have an "active sessions" or "connected devices" page. Log out anything you don't recognize.
If your email or social account sent anything to your contacts, a short heads-up message prevents the scam from spreading further.
The full guide includes this exact response plan, plus how to prevent it from happening again.
Get the guide →