Hey, $mart parents 💡
Bring money lessons home with Greenlight’s $mart Parent newsletter, a quick read with impactful tips — delivered free to your inbox weekly.
Key takeaways
One or more of your accounts have been breached. You’ve spotted fraudulent charges, updated passwords, or accounts opened in your name. Your instinct tells you that you need to act fast, but you’re not sure where to start.
Being hacked is a violation, but it’s fixable. The steps are straightforward. Some take minutes right away, others take a few phone calls this week, and some are smart moves that protect you in the future.
If you suspect malware or an active breach, disconnect from the internet immediately and force log out of all sessions on your primary accounts. After that, here are the steps to bouncing back.
1. Change your passwords, starting now
Do this first: Change email and banking passwords. Use a new, strong password you’ve never used before.
Why it matters: Hackers count on password reuse to access multiple accounts. If your email is compromised, they can reset passwords on everything else.
Pro tip: Use a password manager to generate unique passwords for every site.
2. Call your bank and credit card companies
Do this today: Report the fraud immediately. Most credit card companies have 24/7 fraud lines.
Why it matters: They’ll reverse unauthorized transactions and issue new cards. This creates an official record you’ll need if disputes drag on.
What to expect: The call takes 10–15 minutes. Have your card and recent statements ready.
3. Freeze your credit
Do this today: Contact Equifax, Experian, and TransUnion to place a credit freeze. It’s free and takes about 15 minutes per bureau.
Why it matters: A freeze prevents anyone from opening new accounts in your name without unfreezing first, which is your biggest defense against identity theft.
Pro tip: You can unfreeze temporarily if you need to apply for credit.
^Insurance offered by Acrisure, LLC is provided by ACE American Insurance Company and its U.S.-based Chubb underwriting company affiliates. chubb.com. Additional details can be viewed here. See here for policy information. Insurance Products are not insured by the FDIC or any federal government agency and are not a deposit or other obligation of, or guaranteed by, any bank or bank affiliate.
4. Monitor your accounts for suspicious activity
Do this now: Log into email, banking, credit cards, and social media accounts, and look for unfamiliar activity, new devices, or changed settings.
Why it matters: Hackers often leave traces, such as forwarding rules, changed recovery emails, or linked devices. Catching these early stops ongoing access.
Keep watching: Check your bank and credit card statements daily for the next 30 days. Set up account alerts for transactions over a certain amount.
Pro tip: Consider identity theft monitoring, like Greenlight’s Family Shield, to automatically track your family members’ credit reports and flag suspicious activity before it becomes a bigger problem.
5. File an identity theft report
Do this: Report the hack to the Federal Trade Commission at IdentityTheft.gov. This creates an official record and gives you recovery resources.
Why it matters: You’ll need this report for disputing fraudulent accounts or charges. It also provides a recovery plan tailored to your situation.
Pro tip: File a police report, too. Include the FTC report number. Keep both documents because you’ll access them frequently as you move through this process.
6. Dispute fraudulent charges
Do this: Contact each company with fraudulent charges and dispute them in writing. Include your FTC and police report.
Why it matters: Disputing creates a paper trail and protects your credit score. Most companies have dispute windows, which are typically 60 days for credit cards.
What to expect: Resolution takes 30–90 days. Follow up in writing and keep all correspondence.
7. Monitor your credit and rebuild if needed
Do this: Pull your free credit reports at AnnualCreditReport.com and look for damage. Check your credit score (many banks offer free scores now).
Why it matters: If new accounts were opened in your name, your credit score may have dropped. Monitoring shows recovery progress and catches ongoing fraud.
What to expect: If your credit took a hit, it typically recovers within 6–12 months of dispute resolution.
Pro tip: Set up credit monitoring alerts so you’re notified of changes to your reports. Greenlight’s Family Shield includes credit monitoring and alerts for all family members.
8. Lock down your security for the future
Do this: Enable multi-factor authentication (MFA) on all important accounts. Use a password manager. Keep software updated. Be skeptical of unexpected emails or calls asking for personal info.
Why it matters: Most hacks are preventable. MFA alone blocks 99% of account takeovers.
Long-term protection: Consider using a financial protection service, so if something does happen again, you’re covered and you’ll know immediately. Greenlight’s Family Shield provides identity theft monitoring, credit monitoring, up to $100K scam reimbursement coverage, and alerts.¹
What does “being hacked” actually mean?
Being hacked can mean different things. Here’s what to know:
What it is:
Your email or password was stolen in a data breach
A scammer got your credit card or bank account information
Your device is infected with malware
Someone opened accounts in your name using your personal information
How it happens:
Phishing emails that look legit
Weak or reused passwords
Data breaches at companies you use
Malware on your device or public WiFi
Why it matters:
Fraudulent charges on your accounts
Identity theft and new accounts opened in your name
Damaged credit score
Weeks or months of cleanup and dispute resolution
Don’t just recover, get protected
Every step you take today and this week stops the damage and puts you back in control. Most fraud gets resolved, most credit damage heals, and most hackers move on to easier targets once they see you’re paying attention.
That’s why protection matters. does the heavy lifting for you by monitoring the dark web for your personal information, alerting you to suspicious activity, and covering up to $100K in scam reimbursement losses.¹ If something does happen again, you’ll catch it fast, and you’ll be supported and covered.
FAQs
How long does recovery actually take?
Depending on the type of hack, fraudulent charges typically resolve in 30–90 days. Identity theft, which often comes with new accounts opened in your name, can take 6–12 months. Credit damage usually recovers within 6–12 months of dispute resolution if you stay on top of monitoring and payments.
Will this destroy my credit score?
Possibly, but not permanently. Fraudulent accounts and missed payments from undetected fraud can ding your score. Disputing fraudulent accounts and resolving them shows recovery.
Can I get my money back?
Usually, yes, but it takes time. Credit card companies typically reverse fraudulent charges within 30–90 days. Bank accounts are trickier. Federal law gives you more protection if you report within 60 days. Report fraud immediately to maximize recovery.
What if the hacker opened new accounts in my name?
This is identity theft, not just account fraud. File a police report and FTC report, both for free. Dispute the fraudulent accounts with the credit bureaus. It’s more work, but it’s fixable, and that’s why ongoing credit monitoring and identity theft protection matter.
How do you secure a hacked phone or computer?
Change passwords from a different device. Update your OS and apps immediately, run a malware scan, and monitor for suspicious activity. If you can’t locate the malware, a factory reset is your best bet, but back up important files first.
How can you tell whether a hacker still has access?
Look for unexpected password changes you didn’t make, unfamiliar devices or locations logged into your accounts, changed recovery email or phone numbers, new forwarding rules, or accounts you don’t recognize. Check your account activity logs (most email and banking sites have these). If you spot anything suspicious, change your password and log out all sessions immediately.
¹ Insurance offered by Acrisure, LLC is provided by ACE American Insurance Company and its U.S.-based Chubb underwriting company affiliates. www.chubb.com. Additional details can be viewed here. See link for policy information. Insurance Products are not insured by the FDIC or any federal government agency and are not a deposit or other obligation of, or guaranteed by, any bank or bank affiliate.
² Premium monitoring services are offered by Array.
Share
