Account hacked? Start here

Whether it’s Instagram, Gmail, Steam or your bank — the first 30 minutes decide how bad it gets. Do the six universal steps below, then open the guide for your exact service: each one links the official recovery flow and the traps to avoid.

ByNikita Silianov· Founder & CEO ·LinkedIn

The first 30 minutes — any service

Account takeovers cost Americans over $262M in reported losses in 2025 (FBI IC3) — and most of the damage happens in the first hours. Order matters:

1
Reclaim or lock the account

Use the service’s dedicated hacked-account flow (linked in each guide below) — not just password reset, which often emails the attacker. If you still have access: change the password NOW and sign out all other sessions.

2
Secure your email first

Whatever else was hacked, check your email account before anything else — it receives everyone’s password resets. If the attacker holds your inbox, they can take back every account you "recover".

3
Cut off the money

If a card, bank, or balance is attached: freeze the card in the banking app, report unauthorized transactions to the service AND the bank, and screenshot everything. Speed lowers your liability for unauthorized electronic transfers. For bank-account takeovers, call the number on the back of your card — never a number from a search ad.

4
Check whether it was a SIM swap

Phone suddenly on "No service" while accounts fall one by one? An attacker may have moved your number to their SIM to intercept your codes. Call your carrier from another phone immediately — see our AT&T, Verizon and T-Mobile guides below.

5
Warn your people

Attackers monetize stolen accounts by scamming your contacts in your name. One message on another channel ("ignore anything I ‘sent’ today") protects your friends and documents the compromise for appeals.

6
Find out what leaked

Most takeovers start with a password leaked in an old breach and reused. Check your email against known breach databases — free, below — then fix every account sharing that password.

Pick your service

191 step-by-step recovery guides, each with the official hacked-account link (verified live), the locked-out path, and the service-specific traps.

Phone carriers (SIM swap)

Find the leak that let them in

Roughly a third of takeovers reuse a password leaked in an old breach. See which known breaches and dark-web dumps include your email — free, no signup.

Run my free breach check →