Clean the device and rotate every password

    Two parallel jobs: secure your accounts from a clean device, and restore the compromised device to a known-good state. Don't try to do account recovery on the infected machine.

    Reset vs scan

    If you don't know what they did, a factory reset is the only honest answer for high-value devices. Scans miss a lot of remote-access scammer tooling.

    More from Communications Security

    No image

    Confirm the inbox is actively compromised

    Pin down which account, who's been emailed, and which sessions are unfamiliar.
    No image

    Make the next phishing email harmless

    Use a password manager, hardware key and email aliases so a single phish can't cascade.
    No image

    Use specialised victim resources

    Sextortion has dedicated services — they're free, confidential and fast.