• ^{Look for signs (see below).}
• ^{Check unusual emails, logins, or activity.}
• ^{Don’t ignore your instincts.}

• ^{Start with email, banking, and password manager.}
• ^{Change passwords immediately.}
• ^{Enable MFA.}

• ^{Use a strong, unique password for each account.}
• ^{Use a password manager.}

• ^{Review logins, sessions, devices, and transactions.}
• ^{Log out of unknown devices.}

• ^{Run a full antivirus scan.}
• ^{Remove any threats that are found.}
• ^{Restart your devices.}

• ^{Hackers often start with email.}
• ^{Update password and recovery info.}
• ^{Check filters and forwarding rules.}

• ^{Review transactions for anything unfamiliar.}
• ^{Contact your bank if needed.}

• ^{Don’t handle it alone.}
• ^{Ask a friend or family member for support.}

• ^{Go through all important accounts (social media, cloud storage, shopping, work, subscriptions).}
• ^{Change passwords and enable MFA.}

• ^{Use breach check tools (see below).}
• ^{See if your email or passwords were exposed.}

• ^{Update recovery email and phone number.}
• ^{Remove unknown or old recovery methods.}

• ^{Check third-party apps and services.}
• ^{Remove anything you don’t recognise.}

• ^{Review cloud storage (OneDrive, Google Drive, iCloud, etc.).}
• ^{Restore files only from trusted backups.}

Watch for unusual emails or texts.

Consider a firewall or ID protection service.

• ^{Update operating system, browsers, and apps.}
  
• ^{Close security vulnerabilities.}

• ^{Use strong, unique passwords.}
• ^{Enable MFA everywhere possible.}

• ^{Keep records of incidents, emails, or financial losses.}
• ^{Helpful if reporting or making claims.}

• ^{Report major fraud or identity theft to the relevant authorities.}