Important
Which platform are you on?
The signs below are universal, but the exact place to check differs per platform. Jump to yours for step-by-step help:
Login & Access Warning Signs
- Password no longer works โ someone may have changed it
- Login alerts from unfamiliar locations โ take these seriously
- Unexpected password reset emails โ someone is trying to access your account
- Sessions you don't recognise โ check active sessions for unknown devices
- Two-factor authentication disabled โ a critical red flag
Content & Activity Warning Signs
- Posts or stories you didn't create โ spam, scam links, or inappropriate content
- Messages sent to your contacts โ especially "investment" or "look at this" scams
- New followers or following โ bot-like accounts appearing
- Changed bio or profile picture โ modifications you didn't make
- Deleted content โ your posts removed by someone else
Account Settings Warning Signs
- Email address changed โ switched to an address you don't control
- Phone number changed or removed โ recovery number replaced or deleted
- Unknown third-party apps connected โ services you never authorised
- Privacy settings altered โ switched from private to public or vice versa
- Language or region changed โ settings changed to a language you don't use
What to Do If You Notice These Signs
- Change your password immediately
- Enable 2FA using an authenticator app
- Review and revoke unknown connected apps and sessions
- Check your email โ make sure the account email hasn't been changed
- Report the compromise using the platform's official reporting tool
Tip
Was this guide helpful?
Know someone who needs this? Send them the guide.
Written by
Jordan DicksonFounder, CyberSecurityGuides
Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.
Reviewed by CSG Security Engineers





