The number and the email are the master keys — fix those before everything else.
What to do
- Call the carrier from another phone, prove your identity and reverse the SIM port
- Add a port-out PIN / port-freeze on the carrier account
- Reset the email password from a clean device and sign out all sessions
- Reset every account that uses SMS 2FA — start with banks, crypto exchanges, then primary email
- Call your bank fraud line and dispute every unauthorised transaction; freeze cards
Was this guide helpful?
Know someone who needs this? Send them the guide.
JD
Written by
Jordan DicksonFounder, CyberSecurityGuides
Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.
Reviewed by CSG Security Engineers