Skip to content

Your account was hacked

Take a breath. This happens to people every day.
This page helps you regain control and secure your accounts.

Use this topic if you or someone you support:
  • Cannot log in to an account you normally use.
  • Got a security alert you did not expect.
  • Sees messages, posts, or changes you did not make.

If money, card details, or bank access may be involved, start here instead:
Money at risk. What to do right now

If you feel in immediate danger

Call 999 or 112.

Do these 3 things first

1. Stop the contact

  • Stop replying. Stop answering calls.
  • Do not click again. Do not download anything.
  • If someone is telling you what to do on the phone, hang up.

2. Use a trusted route

  • Be careful with search results. Ads can look like the real site. If in doubt, go to the official app or website you normally use, or type the address yourself.
  • Do not use phone numbers, links, or buttons from a suspicious message.

If you cannot call right now, open your bank app and look for actions like freeze card, change password, or extra sign in security.

3. Secure your accounts

  • Change the password on the account you were asked to “verify”. Start with your email. Then banking. Then anything linked to payments or identity.
  • For secure passwords, use a long passphrase you can remember. Avoid names, birthdays, or common phrases.
  • Turn on two factor authentication where you can.

A helpful rule

Real organisations do not rush you.
Scammers push urgency, fear, and secrecy. you are allowed to slow down.

Choose what happened

You can still log in, but something looks wrong

Do this now.

  • Change your password.
  • Use a long passphrase you can remember.

  • Do not reuse an old password.

  • Turn on two factor authentication if it is available.

  • Sign out of other devices or sessions.

  • Look for options like “Sign out of all devices”.

  • Check your recovery email or phone number. If the recovery email or phone number has been changed, look for an option like ‘I no longer have access to this email or phone’.”

  • Check “connected apps” or "authorised devices". Remove anything you do not recognise.

If you see payments, money transfers, or saved card details you do not recognise, go to: Money at risk. What to do right now

You cannot log in. Your password does not work.

Try these steps in order.

  • Use the official “Forgot password” or “Account recovery” option.
  • If you get a one time code, do not share it with anyone.
  • If recovery details have been changed, look for “I no longer have access to this email or phone”.
  • Contact the provider using a trusted route.
    • Use the official website help page, or the official app support area.

Important

If the account is your email account, treat this as urgent. Email can be used to take over other accounts.

Your email may be compromised

Email is the master key for most online accounts.

  • Change your email password and enable two factor authentication.
  • Check your email settings for changes:
    • Forwarding rules
    • Filters that move or hide messages
    • “Recovery email” and phone number
  • Check Sent and Outbox for messages you did not send.
  • Search for password reset emails you did not request.
  • After you secure email, change passwords on your other important accounts.
Your social media or messaging account was taken over
  • Secure the account using the provider’s official recovery steps.
  • Tell your contacts not to trust new messages for now.
    • A short message is enough. “My account was hacked. please ignore any recent messages.”
  • If the account can run ads or has payment details, remove any cards and check for ads you did not create.
  • Remove unknown devices, connected apps, or suspicious permissions.
  • Check for posts, ads, or messages you did not create.
You installed something, or gave remote access

This can happen in “tech support” scams.

  • Disconnect from the internet if you can (Wi-Fi Off is fine).
  • Uninstall any remote access app you did not install on purpose (common examples include ‘remote support’ tools).
  • Run a malware or antivirus scan.
  • Update your device and browser.
  • If you are unsure, ask a trusted person to help you, or bring the device to a reputable repair shop.

If you think banking details were seen during remote access, go to:
Money at risk. What to do right now

Save evidence (optional). 60 seconds

If you can, capture a little evidence now. it makes reporting easier later.

  • Take screenshots of alerts, messages, and any changes you can see.
  • Note the date and time.
  • Keep any bank alerts or transaction screenshots.

Important

  • If you want to share evidence with someone you trust, share a screenshot. Do not forward a live link.
  • Do not share screenshots that include one-time codes, PINs, or passwords.

Tip

If you want a simple place to write everything down, use: Report and record. Simple incident log

If you want to report it

  • If money is involved, your bank should advise the best next reporting step.
  • If you believe a crime happened, report to your local Garda station and bring your evidence.

When you are steady again