Loading Cyber Conduct…
Please wait while the page loads.
A practical checklist for spotting signs that an online account may have been accessed by someone else.
Short answer
Review recent sign-ins, active sessions, recovery details, connected apps, messages, and security settings. One unusual event is not always proof of compromise, so look at the evidence together.
Start with the account's official security page rather than links in messages.
Review recent sign-ins, devices, active sessions, recovery email addresses and phone numbers.
Check messages, posts, payment activity, connected applications, and security settings for changes you did not make.
If the evidence suggests compromise, change the password, sign out other sessions, enable MFA, and secure related accounts.
Check it now
What to check when you think someone else may have accessed your account.
Open the checkSomething already happened?
If you entered your password on a suspicious website, treat that password as compromised. Go directly to the real service, change it, turn on MFA, and check recent account activity.
If you see activity you don't recognise, secure the affected account directly, change the password, enable MFA, review recent activity and linked devices, and contact the provider if necessary.
If your WhatsApp account may have been compromised, secure the account through the official WhatsApp recovery process, check linked devices, protect your phone number and warn contacts if messages were sent from your account.
Keep exploring