If you think your computer, email or an account has been hacked, the first ten minutes matter. Below is what to do right now, then a number you can call.
These work for most of the situations we see. If something does not match, do not worry - just call us and we will talk you through it.
01
If a device is showing pop-ups, ransom screens or behaving strangely, take it off Wi-Fi. Pull the Ethernet cable if there is one.
02
From a different device, change your main email password. That is the account most other accounts can be reset from.
03
If 2FA was not already on for email, banking and the main social accounts, turn it on now. App-based, not text where possible.
Scenario 01
Files are locked, there is a message demanding a payment in cryptocurrency, the desktop background may have changed.
What to do
Do not pay. Disconnect the device from the network and leave it on. Call us. If we have a backup we restore from there. If not, we work out what is recoverable.
Scenario 02
Strange sent items, contacts saying they have had odd emails from you, password reset emails you did not ask for.
What to do
Change the email password from a separate device. Turn 2FA on. Check the sent folder and rules and filters. Tell your contacts. Call us if anything in the inbox is sensitive.
Scenario 03
You clicked a link, then thought "that was not right", or your browser warned you, or you typed credentials into a fake page.
What to do
Change any password you may have entered. Turn on 2FA. Run a virus scan. Tell us what page it was so we can check it. If it was a work login, tell your team immediately.
Helpful next
Our free email checker. Paste the email in, get a plain-English read.
Type your email at Have I Been Pwned to see if it has appeared in a known leak.
MFA, password manager, backups, sensible defaults. The boring fixes that actually matter.
The UK National Cyber Security Centre's plain-English guidance for home and work.
If money has already moved, contact your bank's fraud line first, then us. If a business email account has been compromised and you handle personal data, you may also need to think about ICO breach reporting. We can help you decide.
Get in touch
Tell us what is happening in your own words. We will reply the same working day, sooner during opening hours.