Something's wrong a login alert you didn't expect, a password that suddenly doesn't work, a friend asking why you sent them a weird link. Here's what to actually do, in order, without panicking.
Email is usually the master key to everything else. Change that password immediately, even before checking what else might be affected.
Log into your bank and card accounts directly (never through a link from a message) and look for anything unfamiliar. Call your bank's fraud line if anything looks wrong.
Most email and social accounts have an "active sessions" or "connected devices" page. Log out anything you don't recognize.
If your email or social account sent anything to your contacts, a short heads-up message prevents the scam from spreading further.
Once the immediate lockdown is done, spend the next day watching for delayed effects — a bank dispute, a new device added to an account, or a contact telling you they clicked something you "sent." Compromises often have a second wave that shows up after the attacker realizes the first door closed.
The full guide includes this exact response plan, plus how to prevent it from happening again.
Get the guide →