Recover a hacked email or social media account

If you are locked out or a friend says your account is sending odd messages, move quickly. Each platform has a recovery path; the trick is using it calmly and in order.

1. Try the platform’s account recovery or Forgot password flow first, from a device you trust.
2. If you still have access, change the password immediately and sign out all other sessions.
3. Check for and remove changes the attacker made: recovery email, phone number, forwarding rules, or linked apps.
4. Turn on two-factor authentication so they cannot simply walk back in.
5. Warn your contacts that messages from you may have been fake, especially any asking for money or codes.
6. If you cannot regain access, use the platform’s hacked-account report form, and ring IDCARE on 1800 595 160 if your identity is at risk.