My account was hacked
Diagnostic Quick Question
Do you still have access to your account right now?
DO THIS NOW
Change password immediately (if still logged in)
Go to account Security Settings. Generate a strong unique 16+ character password or passphrase.
Click "Log out of all other sessions / devices"
Look for Active Sessions or Security Devices in settings and select "Revoke All Other Sessions".
Verify recovery email & phone number
Check if the hacker added their own email address or phone number to your recovery settings.
Enable Two-Factor Authentication (2FA) with Authenticator App
Set up Google Authenticator, Authy, or Passkeys instead of relying purely on SMS.
EMERGENCY KIT
Everything you need to execute recommended actions for My account was hacked
Original Email / Username
RECOMMENDEDNeeded when filling out account recovery appeals.
Approximate Account Creation Date
RECOMMENDEDUsed by security teams to verify true account owner.
Documents, Deadlines & Aftermath Protection
Review required document replacements, official claim deadlines, and follow-up guidance.
Account Recovery & Compromise Appeal
REQUIREDSecurity identification submission to regain ownership of hacked account.
DO NOT DO THIS
- ✕Don't click links in emails claiming to be 'Password Reset Request' unless you requested it right now.
- ✕Don't reuse the compromised password on any other websites or financial accounts.
- ✕Don't pay hackers or extortionists who email you claiming they have recorded videos or private data.
RECOVERY TIMELINE
Check your primary email inbox filters and forwardings
Hackers frequently add silent auto-forwarding rules in your Gmail/Outlook to steal incoming OTP emails.
Revoke connected 3rd-party OAuth apps
Remove authorized apps under "Apps with account access" in your account permissions.
YOU MAY NEED
OFFICIAL ACTIONS & VERIFIED SOURCES
Government & Authority Portals for India
Specific Step Actions & Direct Links
Official Google procedure for compromised Gmail and Google accounts.
Official identity confirmation tool for Meta accounts.
DON'T FORGET
- Email Forwarding & Trash Filters: Check created email filters for keywords like "password", "bank", "verification".
COMMON MISTAKES
- ⚠️ Changing the password without removing the hacker's phone number from account security settings.
- ⚠️ Falling for fake Instagram "recovery agents" on social media offering to hack back accounts for money.