Account takeover
Updated 2026-09-29
Account takeover happens when a scammer gains full control of one of your accounts, such as banking, email, or social media, usually after obtaining your password and a way to bypass extra security like an OTP/TAC. Once inside, they can transfer money, lock you out, or impersonate you to scam your contacts.
When it matters
Common paths into an account takeover include phishing, a SIM swap, or a malicious APK file. If you notice unfamiliar logins, changed passwords, or transactions you did not make, contact your bank immediately and read the first hour after a scam guide, since acting within the first hours matters most.
Read next
APK scam: what to do right now
If you installed an app from a link and your phone or banking now looks wrong, here is what to do in the next few minutes to limit the damage.
Read thisBusiness email compromise: what to do
A supplier or director email asked you to pay a changed bank account. Here is how business email compromise works and the fastest response.
Read thisCrypto scam: what you can do
If a crypto exchange or wallet blocks your withdrawal after you met the operator on a chat app, here is how to trace what happened and what to do next.
Read thisWhat to do right after a scam
If you just realised you sent money to a scam, here is the order of first actions: stop paying, call your bank, call 997, and report it.
Read this