PanicStation.org
UK USA
us Technology & digital loss

What to do if…
your Apple ID or Google Account shows a new device being set up

Produced and maintained by PanicStation.org Published: Last reviewed: Editorial policy USA guide

Short answer

Treat it as urgent until you confirm it was you. Deny the sign-in if you can, then use a trusted device to change the password and remove any unfamiliar devices, sessions, recovery details, and connected apps.

Do not do these things

  • Don’t approve any sign-in prompt you did not personally start.
  • Don’t tap links in alert emails or texts to “secure your account”; go through device Settings or the official account security page.
  • Don’t type your password into pop-ups, ads, search-result pages, or lookalike sites.
  • Don’t reuse an old password, or a slightly changed version of one.
  • Don’t stop after changing the password; access can sometimes continue through recovery details, signed-in sessions, forwarding settings, or connected apps.
  • Don’t contact the unknown device or person.

What to do now

  1. Use a device you trust.

    • Use your own phone, tablet, or computer if you still control it.
    • Avoid making account changes from a public computer or a link in a message.

  2. Deny the sign-in alert if it is still on screen.

    • Apple: choose Don’t Allow if the Apple Account sign-in is not yours.
    • Google: choose the option that says it was not you, such as No, it wasn’t me, if the activity is not yours.

  3. Change the password from official settings.

    • Apple Account: on iPhone or iPad, go to Settings → your name → Sign-In & Security → Change Password. On Mac, use System Settings → your name → Sign-In & Security → Change Password.
    • Google Account: go to your Google Account security settings and change the password.
    • Use a brand-new password you do not use anywhere else.

  4. Remove unfamiliar devices and sessions.

    • Apple: review the device list under your Apple Account and remove any device you do not recognize.
    • Google: go to Security → Your devices → Manage all devices and sign out of any device or session that is not yours.
    • If the same unfamiliar device type appears more than once, review each session and sign out of any you are unsure about.

  5. Check recovery details and sign-in methods.

    • Apple: check that trusted phone numbers, trusted devices, email addresses, and reachable-at details are yours.
    • Google: check recovery phone, recovery email, alternate email, two-step verification methods, and apps with account access.
    • Remove anything unfamiliar, then save the changes.

  6. Check for quiet access in email and connected services.

    • Gmail: look for unfamiliar forwarding, filters, mail delegation, scheduled emails, POP or IMAP access, and “send mail as” addresses.
    • Google: remove apps or services with account access that you do not recognize.
    • Apple: check recent purchases, payment methods, and any Apple Account details that changed without you.

  7. Do a quick damage check if money or identity information could be exposed.

    • Check recent Apple, Google Pay, Google Play, and saved-card activity if you use them.
    • If you see an unauthorized charge, contact your card issuer or bank using the number on your card or in your banking app.
    • If you see a SIM swap, number change, or sudden loss of mobile service, contact your mobile carrier from another phone or secure channel.

  8. Use official recovery or reporting routes if you cannot regain control quickly.

    • Use Apple or Google’s official recovery steps from a trusted device.
    • Avoid search-result ads and unofficial “recovery” services.
    • If identity theft is involved, use IdentityTheft.gov.
    • If money was stolen or there was a serious internet-fraud attempt, consider reporting it to the FBI’s IC3.
    • Keep a simple note of the time of the alert, what you denied or changed, and screenshots if safe.

What can wait

  • You do not need to work out how this happened before securing the account.
  • You do not need to make long-term decisions about every device, app, or password right now.
  • You do not need to factory reset your phone unless official support or a trusted technical professional advises it.
  • You do not need to report anything before you have taken the immediate account-security steps, unless money is actively being moved or you are locked out.

Important reassurance

A new-device alert can feel alarming, but it is also an opportunity to block or limit access. The useful goal right now is narrow: stop this sign-in, close off easy re-entry, and check for obvious damage.

Scope note

These are first steps for an Apple Account or Google Account sign-in alert. Later decisions about identity theft, financial loss, repeated compromise, malware, or device replacement may need help from Apple, Google, your financial institution, your mobile carrier, or another specialist.

Important note

This is general information, not legal, financial, cybersecurity, or professional advice. If you are unsure whether a prompt or page is real, close it and go directly through device Settings or an official account page.

Additional Resources

Closely connected guides that may be useful during the same situation or its immediate aftermath.

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us