⚡ Try NordPass — Get NordPass for 60% off + 3 Months extra and experience enterprise-grade password security at an affordable price. Features include zero-knowledge encryption, cross-platform sync, and breach monitoring.
The first challenge in helping a loved one is knowing that something has actually gone wrong. Hacked accounts rarely announce themselves clearly, so it falls to family members to spot the warning signs. Pay attention if a relative mentions being locked out of their email, social media, or banking app for no apparent reason. Sudden password failures, especially when they are certain they typed the correct credentials, are a classic indicator that someone else has changed the login details.
You may also notice strange behavior from the account itself. Friends might report receiving odd messages, spam links, or urgent requests for money supposedly sent by your family member. Posts could appear that they never wrote, or their profile photo and personal information might be altered. For email accounts, unexpected password reset notifications, unfamiliar login alerts from distant locations, or messages disappearing from the inbox all point to unauthorized access.
Time matters enormously when an account is compromised. The longer an attacker has control, the more harm they can do, from draining funds to using the account to scam other people. Encourage your family member to act immediately rather than waiting to see if the problem resolves itself. If they are panicked or unfamiliar with technology, sit with them and walk through the steps together calmly.
The very first action should be changing the password, provided they can still log in. The new password must be strong, unique, and never reused from another account. If they have lost access entirely, they will need to use the platform's account recovery process, which usually involves verifying identity through a backup email, phone number, or security questions. Acting from a device that is known to be clean and free of malware is important, because logging in from an infected computer can simply hand the new password straight back to the attacker.
Once access is regained, the goal shifts to making sure the attacker cannot return. Changing the password alone is often not enough, because hackers frequently set up hidden ways to maintain control. Help your family member review the account's security settings thoroughly and remove anything suspicious.
It is wise to scan the device for malware as well. If a keylogger or other malicious software is present, the account can be hacked again within minutes of being recovered. Running a reputable security tool and ensuring the operating system and apps are fully updated closes many of the doors an attacker might use.
One compromised account is rarely an isolated problem. Many people reuse the same password across multiple services, which means a single breach can cascade into many. Email accounts are especially critical because they often serve as the recovery method for everything else. If a hacker controls the email, they can reset passwords for banking, shopping, and social media accounts at will.
Help your family member make a list of their important accounts and change the passwords on any that shared the compromised password or relied on the breached email for recovery. Prioritize financial accounts, primary email, and anything containing sensitive personal data. A password manager can make this far less overwhelming by generating and storing unique passwords, removing the temptation to reuse them. For an older or less technical relative, offering to set up and explain a password manager can be a lasting gift that prevents future incidents.
If the hacked account was linked to money or contained personal identification details, additional steps are necessary. Contact the relevant bank or credit card company to report suspicious activity and request that fraudulent charges be reversed. Many institutions can freeze cards, issue new ones, and add extra verification to prevent further losses.
When sensitive information such as a Social Security number, government ID, or financial records may have been exposed, your family member should monitor their credit reports closely. Placing a fraud alert or credit freeze with the major credit bureaus can stop criminals from opening new accounts in their name. Keep a written record of every call, reference number, and action taken, as this documentation is valuable if disputes arise later or if a police report becomes necessary.
Hackers often exploit a compromised account to target the victim's friends and family with scams that appear trustworthy because they come from a familiar name. Encourage your relative to alert their contacts that the account was hacked and to ignore any unusual messages sent during the period of compromise. A simple heads-up can stop someone else from falling for a fraudulent money request or malicious link.
Report the incident to the platform involved, whether it is a social network, email provider, or financial service. Most major services have dedicated channels for reporting hacked accounts and can offer specialized recovery assistance. Depending on the severity, reporting to local authorities or a national cybercrime agency may also be appropriate, particularly when money or identity theft is involved.
Beyond the technical steps, remember the emotional side of being hacked. Victims often feel violated, embarrassed, or anxious, and an older relative may feel especially vulnerable or ashamed. Reassure them that being targeted is extremely common and not a reflection of their intelligence. Patience and a calm, non-judgmental attitude will help them stay engaged in securing their accounts rather than avoiding technology altogether. Use the experience as a gentle opportunity to teach safer habits, such as recognizing phishing emails, verifying unexpected requests, and keeping software updated, so the whole family is better protected going forward.
We may earn a commission if you purchase through these links — at no extra cost to you.