Account Takeover
Station 21 of 25 on the Online and technology line. Code O 21
Safety first
Losing control of accounts can go with monitoring, isolation, threats or control of money. Changing passwords or removing a device can alert the person to what you are doing.
Before you change anything on the compromised account, work out your next step. Do it on a device they cannot see, with a domestic abuse advocate or a tech safety service.
What is Account Takeover?
Someone gets control of your email, social media or bank logins. They can read your messages, write as you, or keep you out, and getting back in depends on them.
It can sound like
- Your usual password stops working and the reset code goes to a phone number you do not recognize.
- Friends ask about a post or message you never wrote, and it reads as cruel or out of character.
- You are told: ‘I changed it because you can’t be trusted with it. I’ll give it back when we’ve sorted this out.’
Also called Account Control
Signs it might be this
- You lost access without changing anything yourself, and recovery options point to details that are not yours.
- Content appears in your accounts that you did not create.
- The other person knows things only your private messages would have shown them.
- Access comes back only after you concede something unrelated to the account.
- You can no longer pay, apply or contact anyone without going through them.
Signs it is probably something else
- Many people report the same lockout at the same time, and the provider confirms a fault.
- The change was announced beforehand, you agreed to it, and you can reverse it.
- A recovery code or reset email arrives at an address you set up yourself.
- Your own old password was reused and leaked, and the provider’s alert shows an unknown login from abroad.
- Access is returned straight away, with an explanation you can check, and nothing is held back.
- The lockout has an explanation from the provider that you can verify.
- Anyone who held your login before gives it back without conditions.
- You can open every account yourself, on your own device, whenever you choose.
Questions to ask yourself
- Did you lose access suddenly, without starting any change yourself?
- Do the recovery email and phone number on the account still belong to you?
- Does anyone close to you gain from you not having this account?
- Does anything appear from your account that you did not write or send?
- Is getting back in described as something you must earn?
- Could you reach this account independently on a device nobody else touches?
What it is
Account takeover is when someone controls another person’s digital accounts without their agreement. They may change passwords, redirect recovery details, read or send messages in the person’s name, or give access back only on conditions.
It is also called account control. It can start as casual shared access and harden into sole control.
One reset after a forgotten password means little. It is a concern when access changes without your knowledge and your ways back in are blocked.
Why it matters
Being pushed out of your own accounts costs more than access. Messages can go out under your name to people who have every reason to believe them.
Everyday tasks like paying a bill or reaching a doctor start to need permission.
How it shows up
- Someone else changes the passwords, recovery email addresses or phone numbers, so the account holder cannot get back in.
- Someone reads, deletes or sends messages from an account while the owner does not know, or knows and cannot stop it.
- This goes beyond ordinary shared access. The person once used the account on their own and now needs someone’s help to open it.
- Access is used as a bargaining chip. It is handed back only after an apology, an agreement or a favor.
- Covers email, banking, social media, phone accounts and cloud storage where photos, documents and contacts are kept.
What you can do
Read the safety note at the top first. If speaking up could make things worse, skip the wording below and talk to someone you trust or a local support service.
Words you could use
“My login stopped working and the recovery number isn’t mine. Do you know why that happened? Let’s sort it out calmly.” If you are unsure how they would react, hold off and ask a tech-safety advocate how to proceed.
Ask about it gently
Ask a plain question about the change: ‘My login doesn’t work and the recovery number isn’t mine. Do you know why?’ Then see whether the answer is specific and whether it is fixed.
Set a clear limit
Do not ask for your logins back unless you are sure it is safe. A demand can lead to the change being hidden, or to anger. A tech-safety advocate can help you regain control of your accounts first.
Step back
Do not argue over each message. Use a trusted device, such as a library computer or a friend’s phone. Check what you can still reach and begin setting up new accounts.
Get support
Tell a trusted person or a domestic abuse or tech safety advocate what you have seen. Before anything changes, write down dates and keep screenshots of login alerts and unfamiliar devices.
At work, school or with services
If a work account is involved, report it to your IT or security team at once. Ask your bank or phone company to block changes unless extra verification is given.
Using this label fairly
- A locked or hacked account does not show that someone close to you did it. Look at the provider’s login history and recovery details before suspecting a person.
- Accusing a partner or relative of taking over your accounts after one failed login can damage trust. The fault may belong to the platform.
How it differs from look-alikes
Stalking & Surveillance (Post-Separation) tracks your movements and contacts after a break-up. It need not touch your accounts at all.
Account takeover goes in through your own logins, recovery details and the messages stored there. Resource Sabotage removes things you need to succeed, such as tools or funding, and blames you for the failure.
Here the thing removed is your access and your own voice.