Account takeover
ATO · Account hijacking
Account takeover is when someone gains control of an account that is yours: email, bank, social, or a shop. They usually get in with a password from a leak or a login code you were tricked into sharing, then change the password and recovery details so you cannot get back in. From inside, they can reach your money, your contacts, and anything the account unlocks.
How we check this: Written and reviewed by the Hunch team; recognition signs reflect how the FTC/FBI describe this scam. · Last reviewed: 2026-08
Check a suspicious message now
Example
You share a "verification code" with someone posing as support. Minutes later you are logged out, your password no longer works, and messages are going out to your contacts from your own account.
How to recognize it
- You are suddenly logged out, or your password stops working
- Emails about password, email, or phone-number changes you did not make
- Friends receive messages or requests from you that you never sent
How Hunch flags it
Hunch flags the messages that lead to takeovers, like requests to share a login code or to enter your password on a look-alike page.
FAQ
What should I do if my account is taken over?
Try to reset the password right away, turn on two-factor authentication, and contact the service through its official site. Then warn anyone who might get messages from your account.
How do scammers take over an account?
Most often with a password from a data leak or a login code you were talked into sharing. That is why a code should never be given to anyone.