Unexpected messages may indicate that someone accessed your account or that a connected application has access.
Change the password and sign out of unfamiliar sessions.
Review connected applications and remove access you do not recognise.
Tell affected contacts not to click links, send money, or share information based on suspicious messages from your account.