Hacked accounts
If your account has been hacked, read our advice and learn how to get support. You can also report it to us online, by phone, or in person
What account hacking is
Account hacking (sometimes called “account compromise”) is when someone manages to get into your account without your permission.
To hack into your account, someone might:
- use passwords taken from data breaches or bought on the dark web
- use personal data found online or data breaches to pretend to be you and bypass security
- use phishing and other scams to get your personal data
- install malware that records your passwords and information
- target outdated software with weaker security
How to report a hacked account
If you want to tell us about a hacked account, you can report it online, by phone, or in person.
What to do if your account is hacked
If your account is hacked you can:
- get advice on what to do from Stop! Think Fraud by the UK Government
- follow advice from the National Cyber Security Centre
Get support from other organisations
You can get support from other organisations:
- National Cyber Security Centre (NCSC) has tools and advice to help you stay safe online
- National Crime Agency National Crime Agency for how to check if your data has been stolen
- Get Safe Online for advice on how to protect yourself online
- Cyber Scotland to report cybercrime and get advice on how to protect yourself or an organisation from cybercrime
- Cyber Aware for National Cyber Security Centre advice on how to stay secure online
- Cyber and Fraud Centre Scotland for advice and tools to protect yourself from fraud
- Cyber and Fraud Hub for advice, self-help tools like scam checkers, and a scam response hotline (phone: 0808 281 3580)
- Stop! Think Fraud is the UK government’s fraud advice service
Ways to prevent your accounts being hacked
To keep your accounts secure and prevent hacking, you can:
- keep software and apps updated for the latest security updates
- make sure all devices have antivirus and firewall installed
- create strong passwords using advice from the National Cyber Security Centre
- avoid repeating passwords for different accounts
- turn on two-factor authentication
- never share personal or sensitive details online or by email
- check the address starts with 'https://' whenever you’re asked to enter personal or sensitive information online
- avoid using unsecure public wifi
- follow Get Safe Online advice if you do need to use public wifi
- regularly check your privacy settings and how your data is being used