Skip to content
Sign In Sign Up
AccountsAid AccountsAid
Menu

Explainer

What to do if your Google Account was hacked

Short answer

Unapproved password, recovery-contact or security changes can indicate account compromise. Review your remaining access and use Google’s owner recovery path if sign-in is lost.

Use recovery if you cannot sign in

We never ask for your account address, password or verification code. AccountsAid cannot recover an account for you.

First decision: can you still sign in?

Criterion Yes — act inside your account No — recover first
Change the password, review recent security events, devices, recovery methods and connected apps. Use Google Account recovery. Do not enter a password or code into a message from a supposed recovery agent.

Stabilize the account

Google's compromised-account guidance covers both access and cleanup.

  1. Check the device you use

    Remove suspicious software and avoid continuing from a device you no longer trust.

  2. Recover or secure sign-in

    Use Google's official flow or your existing signed-in session.

  3. Review the aftermath

    Look for unfamiliar sessions, security changes, third-party access and Gmail forwarding rules.

If money or identity information is involved

Note: Google advises contacting your bank or relevant local authorities when financial or identity information may have been misused.

Is someone spying on my Google Account?

Criterion A concrete account event A claim from a third-party spy tool
Record the unfamiliar event or access you can actually see. Review your own security controls and devices; a device label alone does not identify the person behind it. A copied profile, inbox preview or animation does not prove a private account connection. Do not send a password or code to test that claim.

Read the incident in layers

An alert, a lost password and an unwanted mail rule are different evidence. Review them in order; none identifies a person by itself.

  1. Access — can you still enter the account?

    If no, recovery comes first. If yes, protect the current session and review the sign-in changes. Recover a Google Account you own

  2. Control — what changed without your approval?

    Compare recent security events, recovery contacts and connected access with what you actually set up. Review devices signed in to your Google Account

  3. Aftermath — what remains exposed after sign-in is restored?

    Review relevant product settings such as Gmail forwarding and remove access you do not recognize. Secure your Google Account after a hack

Official sources

Primary Google guidance referenced on this page.