Secure an account that has suspicious activity

If you find unusual activity on your Google Account, these directions can help you protect it.

Find out if your account has been compromised

Important: If you notice any of these signs or similar ones, follow the steps to help secure your account.

Unfamiliar Gmail activity & spam
  • You stopped getting emails.
  • Your friends say they got spam or unusual emails from you.
  • Email that you didn't send shows up in Sent Mail.
  • Your username has been changed.
  • There are changes to your Gmail settings that you don’t recognize.
  • There are labels, filters, or forwarding rules you didn’t set up.
Unauthorized payment activity
  • On Google Pay, you see transfers or transactions you don’t recognize.
  • On Google Pay, you don’t recognize one or more: bank accounts, credit cards, debit cards, or gift cards.
Unfamiliar Google Play activity
  • You see purchases that you didn’t make.
  • You see comments that you didn’t leave.
Unknown YouTube activity
Unusual account activity & notifications

Note: We'll use your recovery phone number and email address to tell you about suspicious activity.

  • You got a notification about an unusual sign-in or a device that you don't recognize.
  • You got a notification that your username or password changed, and you didn’t make the change.
  • You got a notification about some other activity you don’t recognize.
  • You notice a red bar at the top of your screen that says, "We've detected suspicious activity in your account."
  • Your "Device activity and notifications" show unusual devices, times, or locations.

Unfamiliar apps

  • You see apps with account accessthat you don’t recognize.
  • You see apps on one of your devices that you don’t recognize.

Unfamiliar Blogger activity

  • Posts you didn’t publish appear on your blog.
  • You get comments on posts you didn’t publish.
  • Your mail-to-Blogger address has changed, but you didn’t change it.
  • Your blog has disappeared or been blocked.

Step 1: Help secure your account

1. Follow the instructions in the Security Checkup.

2. If you think someone else is using your Google Account, change your password immediately for:

  • Your Google Account (if you haven’t already changed your password through the Security Checkup)
  • Apps and sites where you use the same password you used for your Google Account
  • Apps and sites where you sign in with your Google Account email address
  • Apps and sites for which you’ve saved passwords

3. Make sure your recovery phone number and email are correct, so you stay informed about suspicious account activity.

Step 2: Take more security steps

Help secure your apps and devices
Help secure other Google products you use
Contact your bank or government

Make sure your bank or government didn’t get instructions from someone else if you:

  • Have banking info saved in your account
  • Have personal info (like tax or passport info) saved in a service like Google Photos, Google Drive, or Gmail
  • Think someone is using your identity or impersonating you
Remove harmful software

If you think your account has suspicious activity, you might need to remove harmful software. To improve your account’s security further, install and run trusted anti-virus software.

You can also reset your computer to its factory settings and reinstall the operating system. Important: Make sure to back up the files you need first. Learn how to upload files to drive.

Install a more secure browser

Some internet browsers have security weaknesses. Consider using a more secure browser, like Google Chrome.

If you can’t sign in to your account

If you think someone else is using your account, find out how to recover a hacked or hijacked account.

hc_author_accounts

Nick is an Accounts expert and the author of this help page. Leave him feedback below about how to improve it.

Was this article helpful?
How can we improve it?