Hacked? Stay calm.

Choose what happened. You get a clear checklist – the most important steps first. Everything runs in your browser, nothing is stored.

What happened?

Email account taken overPassword changed, emails sent in your name or logins from abroad
Entered bank or card detailsOn a fake site, on the phone or via a text message link
Messenger account hijackede.g. WhatsApp: code passed on, suddenly logged out
A scammer had access to my computerRemote access allowed, e.g. after a call from “support”
Social media account taken overInstagram, Facebook, TikTok & co.
Received an extortion email“I filmed you” – often with a real old password

0 / 8 done

Sign in from a clean device NowUse a device you do not suspect of malware. If you are locked out, use your provider’s official account recovery.
Change your password NowA new, long password that you use nowhere else. A password manager makes this easy.
Sign out all devices NowEnd all active sessions in your account settings so the attacker is kicked out immediately.
Check recovery detailsCheck the phone number and backup email. Attackers like to add their own details there to get back in.
Check forwarding and filtersAttackers often set up hidden forwarding or filters that delete emails. Remove anything you did not create yourself.
Turn on two-factor authenticationThen a stolen password alone is no longer enough. This matters most for your email account.
Change passwords of other accountsYour inbox can be used to reset other passwords. Start with banking, shopping, social media and anything that used the same password.
Warn your contactsTell friends and colleagues that emails in your name may be fake, especially those with links or payment requests.

Another case

0 / 6 done

Call your bank immediately NowUse the number on your card or your bank’s real website, not the one from the message. Have your card and online banking blocked.
Use your bank’s emergency line NowMost banks offer a 24/7 number to block cards. In Germany, the central blocking hotline is 116 116 (from abroad: +49 116 116).
Do not confirm any more codes NowDo not pass on any further codes or push approvals, not even to supposed bank staff. Real banks never ask for them.
Check your transactionsLook for transfers, debits and new payees. Report unauthorised payments to your bank right away.
Report it to the policeMany police forces offer online reporting. A report also helps when dealing with your bank.
Change your credentialsNew password and PIN for online banking as soon as your bank restores access.

Another case

0 / 6 done

Verify your account again NowSign in again with your phone number and confirm the SMS code. This logs the attacker out.
Never share codes NowThe verification code is only for you, even if a “friend” claims to have received it by mistake. That is exactly how the scam works.
Turn on two-step verificationSet your own PIN in the account settings. Then the SMS code alone is no longer enough.
Warn your contactsTell them through another channel that messages asking for money did not come from you.
Check linked devicesUnder “Linked devices” in the settings, log out anything you do not recognise.
Report itIf money was requested in your name, a police report helps those affected and you.

Another case

0 / 6 done

Disconnect from the internet NowTurn off Wi-Fi or unplug the cable. This cuts the attacker’s connection.
Inform your bank NowIf you used online banking during the session, call your bank immediately.
Remove the remote access softwareUninstall programs such as AnyDesk or TeamViewer if you do not need them yourself.
Change passwords from another deviceEmail first, then online banking and all important accounts. Not on the affected computer.
Check or reinstall the computerScan it with up-to-date antivirus software. The safest option is to reinstall the system or have it checked by a professional.
Report it to the policeNote the phone number, time and what was said. This helps the police.

Another case

0 / 5 done

Do not pay, do not reply NowThese emails are sent out in bulk. A reply only shows that your address is active.
Stay calm NowThe claims are almost always made up. The password usually comes from an old data breach, not from your device.
Change the password mentionedIf a real password appears in the email, change it wherever you still use it.
Check your email addressUse the email check to see which data breaches include your address.
Report the email as spamThen delete it. If you are unsure or the threats are real, you can report it to the police.

Another case

This advice does not replace individual advice. In case of crime, contact the police. Stuck? Get in touch via the contact form.

Check whether your data is already in breaches, how secure your password is and whether a link is dangerous.