Recover From an Incident

Recover From an Incident

Take fast action if your identity, account, or device has been compromised.

Emergency response

Immediate steps to take

  • 1
    Cut off contactStop responding to the attacker or suspicious source.
  • 2
    Change passwordsStart with email, banking, and other critical accounts.
  • 3
    Capture evidenceSave screenshots, messages, dates, and account details.
  • 4
    Report the incidentUse official identity-theft and fraud reporting resources.
  • 5
    Watch your credit and accountsLook for new activity that should not be there.

When to move quickly

Speed matters. The sooner you lock down access, document what happened, and notify the right institutions, the easier it is to limit damage.