How to know if you have been hacked – 12 signs

You may have been hacked if you're suddenly locked out of accounts, get password reset emails or 2FA codes you didn't ask for, see payments you don't recognize, or your device starts behaving strangely. Spotting these signs early lets you lock attackers out and limit the damage before it spreads. Below are the 12 most common signs, and what to do if you see them.

What are the first signs of being hacked?

The first signs usually show up in one of four places:

Table: Where the first signs of a hack tend to show up

Hackers may get in by tricking you into downloading malicious software to your computer, iPhone or other devices. In other cases, your information was exposed through a data breach or cyberattack against a service you use.

How to know if you have been hacked: 12 common signs

Attackers reach devices and accounts in many ways: phishing emails and texts, fake tech support, unsecured public Wi-Fi, and automated attacks that cycle through stolen credentials at scale.

On public Wi-Fi, the quieter risk is someone sitting between you and the site you're using, which is how a man-in-the-middle attack works.

What you notice depends on the type of attack, what the attacker is after and how well protected you are. These are the most common warning signs.

1. You can't access your accounts, or something looks off

Sudden changes to your accounts, or losing access entirely, are clear signals. Watch for:

• Unexpected logouts from social media, email or banking
• Passwords that no longer work
• Emails or texts about login attempts, password resets or 2FA codes you didn't trigger
• Changes to your settings, backup contact details or security questions

2. Unusual activity in your email or messaging apps

Once inside your account, attackers use it to reach your contacts, spreading malware or running scams in your name. Signs to watch for:

• Sent messages you don't recognize
• A sudden spike in spam, especially threats or extortion attempts
• Friends or colleagues telling you they've had strange messages from you

Attackers may also create inbox rules that silently hide or redirect emails, which makes the intrusion harder to spot.

3. You're told your data was part of a breach

Take breach alerts seriously. They don't always mean you've been compromised, but they do mean your risk is higher. You can check your email address yourself on Have I Been Pwned, a free breach lookup service. Update any exposed passwords right away and keep a closer eye on the affected accounts. A good password manager can flag passwords that have appeared in known leaks.

4. Your device starts behaving differently

Malware affects performance in ways that are easy to overlook at first. Pay attention if:

• Your device is slower, crashes more often, overheats or drains its battery faster than usual
• Unfamiliar browser extensions or toolbars appear
• Apps launch on their own without you opening them

5. Someone else appears to be in control

Some malware and tools give attackers remote access to your device. From there they can browse your files, read your emails and move money.

If your cursor moves without you touching it, or your webcam light turns on when you're not using it, treat that as a serious red flag.

6. Money is missing or moving without your knowledge

Financial accounts, especially crypto, are high-value targets. Look out for:

• Unfamiliar charges on your bank or credit card
• Missing funds from a cryptocurrency wallet
• Unexpected inquiries or new accounts on your credit report

7. Someone is impersonating you

Attackers can use your stolen information to scam your professional contacts or take on your identity entirely, for example by applying for jobs, loans or insurance in your name. If someone mentions a strange interaction with "you" on a platform you don't use, look into it straight away.

8. A ransomware notice appears

Ransomware locks you out of your system and encrypts your files until you pay. It's no longer limited to large organizations: individuals and mobile users are targeted too.

Be careful with any app asking for access to Accessibility Services. A pop-up demanding payment to restore your files means your device is likely already infected.

9. Your security software has been disabled

Sophisticated attackers try to switch off your defenses before moving further into your system. If your antivirus has been turned off without your input, assume something is wrong. Keep your security software on and up to date.

10. Pop-ups and redirects you didn't ask for

Adware hijacks your browsing. It triggers pop-ups, sends you to unwanted sites or quietly changes your default search engine. A sudden flood of ads, unexpected redirects or tabs opening on their own all point to a compromised browser.

11. Identity theft beyond your devices

Stolen data often ends up sold on the dark web. That can mean someone opens accounts or takes out loans in your name, and you're the one hearing from debt collectors. Unexplained credit inquiries or unfamiliar accounts on your credit report are signals you can't afford to ignore. In the US, you can report it and get a recovery plan at IdentityTheft.gov.

12. Activity on your social media you didn't create

Social accounts are valuable to attackers who want personal data or a way to run scams. Review your activity regularly: posts, messages and friend requests you don't recognize are all warning signs. Check your list of logged-in devices too, and treat anything unfamiliar as a potential breach.

Also read: Understand the different types of exposure

What to do if you get hacked: 10 steps

If you've been hacked, act fast. These steps limit the damage, roughly in the order you should take them.

1. Disconnect from the internet. A hacked device can spread the infection to others on the same network. Cut the connection now, and turn off Wi-Fi on each device so it doesn't reconnect automatically.
2. Freeze your credit. If your financial information is at risk, place a credit freeze with all three major US credit bureaus: Experian, Equifax and TransUnion. It's free, and it stops attackers from opening new accounts or taking out loans in your name.
3. Scan for malware and remove unfamiliar apps. Malware can give attackers a backdoor into your accounts even after you've changed your passwords. Run a full antivirus scan, and delete any app you don't recognize or didn't mean to install.
4. Recover compromised accounts. Most platforms have a dedicated recovery process. Search for "how to recover a hacked [service name] account" and follow the steps from the platform itself.
5. Update your passwords. Change the passwords on all affected accounts, and on any others that share the same password. Use strong, unique passwords that mix uppercase and lowercase letters, numbers and symbols, and keep them in a password manager.
6. Turn on two-factor authentication. Even if your password is exposed, 2FA adds a layer that's much harder to get past. Turn it on for every important account, especially email and banking. An authenticator app is stronger than SMS.
7. Alert your contacts. Attackers use hacked accounts to spread scams and malware to the people you know. Tell your contacts what happened and ask them not to open unexpected messages, links or attachments from your accounts.
8. Review your other accounts. A breach rarely stops at one account. Check activity logs everywhere for unfamiliar logins or devices. Start with your bank and email, and lock down anything that looks suspicious.
9. Update your operating system and apps. Outdated software is an open door. Run the latest versions on all your devices to close known vulnerabilities.
10. Factory reset as a last resort. If malware survives a scan, a factory reset is the most reliable way to get rid of it. Wiping the device and reinstalling the operating system removes even deeply embedded threats.

How to protect yourself from being hacked

You can be hacked through no fault of your own, but some precautions still help. At a bare minimum, the less personal information there is about you online, the harder you are to target.

Five ways to protect your privacy and make yourself harder to hack:

1. Use an email alias. When you sign up for accounts, surveys or applications, use a secondary address that forwards to your main inbox. That keeps your primary address, and the accounts linked to it, out of harm's way.
2. Enter fake information when signing up for online services. Never give false information for anything official, like your taxes or a police report. On retail sites, surveys, apps and newsletters, though, you can be more guarded. If one of those companies is breached, an incorrect date of birth or an old phone number makes you a harder target.
3. Tighten your privacy settings on social media. Ideally only trusted friends and family can see your profile. Without open access to your location, photos and posts, hackers have less to build a phishing scam around.
4. Remove your personal data from Google searches and data broker sites. Data brokers collect and sell your personal information, and hackers can use it. For search results, see our guide on how to remove search results about you from Google. For brokers, opt out by contacting the major ones directly or use a data removal service.
5. Beware of shoulder surfing. Watch your surroundings when you log in to sensitive accounts or unlock your phone. Someone nearby can see you enter your PIN, your online banking password or even your card number. Where you can, use Face ID or a fingerprint sensor instead.

Staying ahead is easier than cleaning up afterwards. This is the part Serus automates: it finds where your personal data is exposed, including data brokers and people-search sites, removes it, and monitors the dark web and breach databases so you get an alert when your data shows up.

Also read: How to protect your digital footprint: 10 easy ways