Skip to content
Digital Life Check
Search

Email account hacked? What to do now

Whoever controls your email can reset the passwords on your other accounts. Here is how to get back in, find what the hacker changed and lock it down.

Written by
Digital Life Check editorial team
Reviewed by
Not yet independently reviewed
Last checked

Do this now: go to your email provider's own sign-in or account recovery page (not a link in a message) and change your password. Then check for forwarding rules you didn't set up, sign out every other device and turn on two-step verification. If you can't get in, use the provider's recovery page — links for Gmail, Outlook and iCloud are below.

Your email matters more than any other account. The National Cyber Security Centre (NCSC) warns that a criminal who gets into your email could reset all your other account passwords and get into those accounts too. That's why it comes first.

How do I know my email has been hacked?

The NCSC lists these signs that an account has been hacked:

  • you can't sign in
  • security settings have changed without you doing it
  • there are messages or notifications you don't recognise, such as emails in your Sent folder you didn't write
  • there are sign-ins from places or at times that don't fit
  • there are money transfers or purchases you didn't make.

Step 1: How do I get back into my account?

Go to your provider's help pages yourself, as the NCSC advises. Each has its own recovery route:

Once you're in, change the password to a strong one you don't use anywhere else. Our guide to creating a strong password shows how.

Step 2: Has the hacker left anything behind?

Hackers often set things up so they keep getting your email after you change the password. The NCSC warns that criminals commonly set up a forwarding rule that sends them a copy of every email you receive. Check:

  • Forwarding — is your mail being sent to an address you don't know?
  • Filters or inbox rules — is anything being moved, deleted or marked as read automatically that you didn't set up? The NCSC says to check your filters as well as forwarding.
  • Recovery phone number and recovery email — Google says to correct these straight away if you see changes you don't recognise. Otherwise the hacker can use them to take the account back.
  • Gmail only: Google also lists mail delegation (people with access to your Gmail) and IMAP or POP access as settings to check.
  • Outlook only: Microsoft says to check connected accounts, forwarding and automatic replies.
  • Apple only: Apple says to check with your email provider and mobile network that you control every email address and phone number on your Apple Account.

Step 3: How do I throw the hacker out?

Sign out every other device. The NCSC recommends logging all devices and apps out of the account. Google has a Your devices page for this, and Apple lets you remove devices you don't recognise at account.apple.com. Also look at your recent security activity: Google shows it under Security > Recent security events.

Step 4: How do I stop it happening again?

  1. Turn on two-step verification. The NCSC says this means that even if a criminal knows your password, they won't be able to get into your account. Our guide to two-factor authentication explains the options.
  2. Update your devices and apps. The NCSC advises installing updates as soon as they're available, and switching on automatic updates.
  3. Scan your computer if you haven't already. If your phone is behaving oddly too, see is my phone hacked?

Step 5: What about my other accounts?

  • Change any password you reused. The NCSC notes criminals know many people use the same password for different accounts, so change the password on any account that shared it with your email.
  • Check accounts linked to this email address — banking, shopping, social media and anything else that sends password resets here. Look for purchases, transfers or changes you didn't make; the NCSC recommends checking your bank and shopping accounts.
  • Find out if your address was in a data breach. See has my email been in a data breach?

Step 6: Who should I tell?

  • Your contacts. The NCSC suggests letting friends and followers know, so they ignore any suspicious messages sent from your account.
  • Report Fraud, if you've lost money. In England, Wales and Northern Ireland, report it to Report Fraud at reportfraud.police.uk (opens in a new tab) or on 0300 123 2040. In Scotland, call Police Scotland on 101.
  • Your bank, straight away, if the hacker could have seen or used your card or bank details. Dial 159 to reach your bank.

What if I can't get my account back?

The NCSC says that if recovery fails, set up a new account and tell your contacts the new address. Then update the email address on your banking, utility and shopping accounts so password resets go to an account you control.

If your WhatsApp was taken over as well, see WhatsApp hacked? How to get your account back.

Want to check the rest of your set-up? Our Password Check and Security Check take a few minutes. If this started with a message you clicked, see what to do if you clicked a scam link.

Common questions

Why is a hacked email account so serious?

The National Cyber Security Centre warns that someone who gets into your email account could reset the passwords on your other accounts and get into those too. That is why you should secure your email first, and give it a strong password you don't use anywhere else.

The hacker changed my password. Can I still get my account back?

Often, yes. Go to your provider's own account recovery page: Google's account recovery page for Gmail, Microsoft's sign-in helper and recovery form for Outlook, or iforgot.apple.com for an Apple Account. Answer the questions as fully as you can. Apple warns that its recovery can involve a waiting period before you get back in.

Why do I need to check email forwarding after a hack?

The National Cyber Security Centre warns that criminals commonly set up a forwarding rule so they automatically get a copy of every email sent to your account. If you change your password but leave the rule in place, they can keep reading your mail, including password reset emails for your other accounts. Check forwarding, filters and inbox rules.

Should I report a hacked email account to the police?

If you've lost money, yes. In England, Wales and Northern Ireland, report it to Report Fraud at reportfraud.police.uk or on 0300 123 2040; in Scotland, call Police Scotland on 101. If your card or bank details could have been seen, call your bank on 159 as well.

Sources

Last checked: 25 September 2026

More on security

  • SecurityUrgent help

    WhatsApp hacked? How to get your account back

    If someone has taken over your WhatsApp, the only way to throw them out is to log back in with the 6-digit code sent to your phone number. Here is how, and what to do next.

    Last checked 25 September 2026