PanicStation.org
UK USA
uk Technology & digital loss

What to do if…
your messaging account is being registered or linked on a device you do not recognise

Produced and maintained by PanicStation.org Published: Last reviewed: Editorial policy UK guide

Short answer

Do not approve the registration, share a verification code, or scan a QR code. Open the official messaging app on a device you trust, remove any unrecognised device or session, then secure the account and its recovery routes.

Do not do these things

  • Do not share a password, PIN, verification code, recovery code, or QR code with anyone.
  • Do not approve a sign-in or device-linking prompt you did not start.
  • Do not follow links or call numbers contained in an unexpected account alert.
  • Do not reply to someone claiming to be support through an unsolicited message.
  • Do not pay anyone who claims they can recover or protect the account.
  • Do not rely on a displayed device name or location as proof of who is involved.
  • Do not delete the account before checking the provider’s official recovery instructions.

What to do now

  1. Open the messaging app directly on a phone, tablet, or computer you trust. Do not enter through a link in the alert.

  2. Look in Linked devices, Devices, Active sessions, Where you are logged in, or the equivalent account menu. Remove any device or session you do not recognise. Use an option to sign out other devices if the service offers one and you cannot identify the unfamiliar session safely.

  3. If you have been signed out or the account has been registered elsewhere, start the provider’s official recovery or re-registration process from its app or website. Avoid recovery services found through unsolicited messages or adverts.

  4. Change the messaging account password or PIN if the service uses one. If you reused that credential elsewhere, change it on those accounts too, starting with the connected email account.

  5. Turn on two-step verification, two-factor authentication, or a passkey if available. Check that every recovery email address and phone number shown belongs to you.

  6. Secure the email account connected to the messaging service. Review recent sign-ins, linked devices, forwarding rules, and recovery details, then remove or correct anything you do not recognise.

  7. Check whether calls and text messages still work on your phone. If service stopped unexpectedly, or you received an alert about a replacement SIM or number transfer you did not request, contact your mobile provider immediately through its official app, website, or a number you already know is genuine.

  8. Before removing the unfamiliar device, take a screenshot of the alert or session details if this does not delay securing the account. Note the approximate time and any messages or account changes you did not make.

  9. If messages were sent from your account, warn trusted contacts through another channel. Ask them to treat recent requests for money, codes, links, or personal information as suspicious.

  10. If it is a workplace account, tell your employer’s IT or security contact promptly using a trusted route.

  11. If money was taken, contact your bank or payment provider immediately. In England, Wales, or Northern Ireland, report cyber crime or fraud to Report Fraud. In Scotland, contact Police Scotland on 101. Call 999 if someone is in immediate danger or a serious incident is happening.

What can wait

You do not need to identify who attempted the access before securing the account. Replacing your phone, changing your number, posting publicly, checking every old conversation, or making long-term account decisions can usually wait until unknown sessions are removed and your email and mobile accounts are secure.

Important reassurance

A verification or registration alert alone does not prove that access succeeded; someone may have attempted a login or entered your number by mistake. An active device or session you do not recognise needs prompt attention, but removing access and securing the connected accounts can limit further use.

Scope note

This guide covers immediate account-protection steps only. Later recovery, investigation, workplace reporting, financial disputes, persistent harassment, or concerns that a device itself is compromised may require specialist help.

Important note

This is general information, not legal, financial, cybersecurity, or other professional advice. Account menus and recovery processes vary, so follow the messaging provider’s current official instructions.

Additional Resources

Closely connected guides that may be useful during the same situation or its immediate aftermath.

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us