Find out if your Google Account has been hacked
If you notice any of these signs, someone else may be using your Google Account.
Important: If you think someone else is signed in to your Google Account, change your password immediately for:
- Your Google Account, if you didn’t change it already
- Apps and sites:
- That you use the same password you used for your Google Account
- That contact you through your Google Account email address
- Where you sign in with your Google Account email address
- Where you saved passwords in your Google Account
Suspicious account activity
Correct the setting immediately if you see unfamiliar changes to these settings:
- Your recovery phone number.
- Your recovery email address.
- An alternate or contact email address.
- The name on your Google Account.
- Your security question.
- Tip: Additional security questions are no longer available.
- Apps with access to your account.
- If this setting was turned on or off without your knowledge:
- 2-Step Verification methods.
- Location Sharing.
Your financial activity might be suspicious if:
- On Google Pay
- On Google Play, you don’t recognize purchases: Report unauthorized charges.
- On Google Chrome, payment info you don’t recognize is set up: Delete unfamiliar payment info.
- On Google Ads, you notice unauthorized charges or ads: Ask the Google Ads team to review your account for unusual activity.
- On Google AdSense, you notice that payments aren’t going to the correct bank account: Check your AdSense payment method.
Tip: To tell you about suspicious activity, we'll use your recovery phone number and email address.
We’ll inform you of unusual activity through:
- A notification about an unusual sign-in or a new device on your account.
- A notification that there was a change to your username, password, or other security settings, and you didn’t make the change.
- A notification about some other activity you don’t recognize.
- A red bar at the top of your screen that says, "We've detected suspicious activity in your account."
- Your "Device activity and security events" page.
Suspicious activity in Google products you use
Correct the setting immediately if you see unfamiliar changes to:
- Mail delegation: People with access to your Gmail
- Automatic mail forwarding
- Scheduled emails
- Your name in Gmail
- Automatic reply: Vacation responder
- Address on outgoing mail
- Blocked email addresses
- Remote access to your Gmail: IMAP or POP
- Filters that manage your incoming mail
- Labels that organize your incoming mail
Your Gmail activity might be suspicious if:
- You no longer receive emails.
- Your friends say they got spam or unusual emails from you.
- Your username has been changed.
- Your emails were deleted from your inbox and aren’t found in "Trash". You can report missing emails and possibly recover them.
- You find "Sent Emails" that you didn’t write.
Your YouTube activity might be suspicious if:
- Your YouTube channel has videos you didn't upload, comments you didn't make, or unfamiliar changes to your:
- Profile photo
- Email settings
- Sent messages
Your Blogger activity might be suspicious if:
- Posts you didn’t publish appear on your blog.
- You get comments on posts you didn’t publish.
- Your mail-to-Blogger address has changed, but you didn’t change it.
- Your blog disappeared or was blocked.