What to do if you think you have been hacked

Maybe friends received a strange message from you, maybe you have been locked out of an account, or maybe someone talked you into letting them onto your computer and now you feel uneasy. Whatever the trigger, here is a clear order to work through. And remember, this happens to careful people all the time, so there is no need to feel foolish.

If someone is connected right now, disconnect

If a caller has remote access to your computer, or you think something is actively happening, disconnect from the internet straight away. Unplug the network cable or turn off the Wi-Fi, or simply switch the computer off. This immediately cuts off anyone who is connected.

Change your most important passwords

Using a different, trusted device such as your phone, change the password on your email first, because it is the key to everything else. Then change your online banking and any account you reuse that password on. If you cannot get in because a password has already been changed, use the account recovery options or contact the provider.

Turn on two-step verification

Once you are back in, switch on two-step login for your email and banking. This means a stolen password alone is no longer enough to get in, and it stops the same thing happening again.

Check for anything that should not be there

Have a look for changes you did not make.

If you spot anything unfamiliar, it is worth having the machine checked properly.

• ✓Email rules that forward your messages elsewhere
• ✓Programs you do not remember installing
• ✓Payments or orders you did not make
• ✓Contacts reporting odd messages from you

Tell your bank and report it

If any money is involved, contact your bank immediately using the number on your card. In the UK you can also report scams and fraud to Action Fraud, and forward suspicious emails to [email protected]. Reporting helps protect other people too.

Get the computer checked over

If a scammer had access to your machine, it is wise to have it looked at to make sure nothing has been left behind. We do this calmly and thoroughly, remove any remote-access tools, and help you feel secure and confident using it again.

• ●Disconnect immediately if someone has live access
• ●Change your email password first, then banking
• ●Switch on two-step login to stop it recurring
• ●Contact your bank about any money, and get the machine checked