Your email inbox is more than just a place for messages — it’s the master key to your entire digital life. It’s connected to your bank accounts, social media, online shopping, work documents, and password resets for nearly every other service you use. That’s exactly why hackers love targeting email accounts.
The scary part? Many people don’t realize their email has been hacked until real damage is already done — a drained bank account, a locked-out social media profile, or friends receiving strange messages “from them.” The good news is that a compromised email account almost always leaves warning signs before things spiral out of control.
In this guide, we’ll walk through the 10 most common signs your email has been hacked, followed by a clear action plan to lock things down and recover your account.
1. You Can’t Log In With Your Usual Password
This is the most obvious red flag. If your correct password suddenly stops working, and you haven’t changed it yourself, there’s a strong chance a hacker has already logged in and changed your credentials to lock you out.
What it means: The attacker may already have full control of your inbox, including your recovery options.
2. You Receive a “New Login” or “Suspicious Activity” Alert
Most major email providers (Gmail, Outlook, Yahoo) automatically notify you when your account is accessed from a new device, browser, or unfamiliar location. If you get an alert about a login from a city or country you’ve never visited, take it seriously — even if you were able to log in normally afterward.
What it means: Someone else may have accessed your account, even briefly, which is enough time to install a forwarding rule or steal data.
3. Contacts Report Receiving Strange Emails “From You”
If friends, family, or coworkers start asking why you sent them a weird link, an urgent money request, or a spam advertisement, your account is very likely compromised. Hackers often use hijacked email accounts to send phishing messages because people are more likely to trust an email from someone they know.
What it means: Your account is being actively used to spread scams or malware to your entire contact list.
4. Your Sent Folder Has Emails You Didn’t Send
Check your “Sent” folder regularly. If you spot messages you never wrote — especially ones with links, attachments, or requests for money — this is one of the clearest signs of unauthorized access.
What it means: The attacker is using your account directly, not just monitoring it.
5. Unexpected Password Reset Emails From Other Sites
If you’re receiving “reset your password” emails from services you use (like your bank, Amazon, or social media), but you never requested them, someone may be trying to use your hacked email to take over your other online accounts.
What it means: Your email is being used as a launchpad to break into your other accounts.
6. Your Recovery Information Has Changed
Go into your account settings and check your recovery phone number and backup email address. If either has been changed without your knowledge, a hacker may be trying to permanently lock you out and take full ownership of the account.
What it means: This is a serious sign of an active takeover attempt — act immediately.
7. You Notice New, Unfamiliar Forwarding Rules or Filters
Sophisticated hackers often set up “auto-forwarding” rules that silently send copies of your incoming emails to their own address — including password reset links, banking statements, and private conversations — without you noticing anything unusual in your inbox.
What it means: The hacker may be reading your emails passively, even if they don’t log in again.
8. Missing Emails or Emptied Folders
If important emails, entire folders, or your inbox history suddenly vanish, this could mean someone is covering their tracks or deliberately deleting evidence of their activity (like sent phishing emails or security alerts).
What it means: Someone is trying to hide what they’ve done inside your account.
9. Your Device Shows Unusual Activity Right After Logging In
If your computer or phone starts behaving strangely — pop-ups, slow performance, or unfamiliar programs — right around the same time you notice suspicious email activity, your device (not just your email) may be infected with malware or a keylogger that captured your password.
What it means: The hack may go beyond your email and involve malware on your device.
10. You Get Locked Out of Linked Accounts Too
Since email is often used to reset passwords elsewhere, a hacked inbox can quickly lead to a chain reaction — your social media, cloud storage, or even banking apps may suddenly become inaccessible as the attacker locks you out of everything connected to that email address.
What it means: The breach has likely spread beyond email into your wider digital identity.
What to Do If Your Email Has Been Hacked
If you’ve spotted one or more of these warning signs, don’t panic — but act quickly. Here’s a step-by-step recovery plan:
Step 1: Try to Regain Access Immediately
Use your provider’s “Forgot Password” or account recovery tool right away. Every major provider (Gmail, Outlook, Yahoo) has a dedicated hacked-account recovery flow — use it before the attacker changes recovery details further.
Step 2: Change Your Password
Choose a strong, unique password you haven’t used anywhere else — ideally a long passphrase mixing letters, numbers, and symbols. Avoid anything tied to personal details.
Step 3: Enable Two-Factor Authentication (2FA)
Turn on 2FA immediately. This adds a second layer of verification (like a code sent to your phone or an authenticator app) so a password alone isn’t enough to log in.
Step 4: Check and Remove Forwarding Rules and Filters
Go into your email settings and review any forwarding addresses, filters, or auto-reply rules. Delete anything you didn’t set up yourself.
Step 5: Review and Update Recovery Information
Make sure your recovery phone number and backup email are correct and belong to you. Remove anything unfamiliar.
Step 6: Check “Connected Apps” and Device Sessions
Most providers let you see which apps and devices have access to your account. Revoke access for anything you don’t recognize, and sign out of all active sessions.
Step 7: Scan Your Devices for Malware
Run a full antivirus/anti-malware scan on your computer and phone in case a keylogger or malicious software helped steal your password in the first place.
Step 8: Warn Your Contacts
Send a quick heads-up to your contacts letting them know your account was compromised, so they know to ignore or delete any strange messages sent “from you.”
Step 9: Update Passwords on Linked Accounts
Since your email is tied to other services, change the passwords for your banking, social media, and shopping accounts as a precaution — especially any that use the same or similar password.
Step 10: Monitor Your Accounts Going Forward
Keep an eye on your bank statements, login alerts, and email activity for the next few weeks to catch any lingering issues early.
How to Prevent Future Email Hacks
- Use a unique, strong password for your email — never reuse it elsewhere.
- Always enable two-factor authentication.
- Be cautious of phishing emails asking you to “verify” your account or click urgent links.
- Regularly review your account’s security settings and active sessions.
- Consider using a password manager to generate and store complex passwords securely.
Frequently Asked Questions
How do I know for sure if my email was hacked?
Look for the warning signs above — especially unfamiliar login alerts, sent messages you didn’t write, or changed recovery information. Your provider’s security or activity log is the most reliable place to check.
Can a hacker access my email without changing my password?
Yes. Attackers often quietly read or forward your emails without changing anything, so you may not notice unless you check your account’s login activity and forwarding settings.
Is it too late if a hacker already used my email to reset other passwords?
Not necessarily. Act fast — recover your email first, then immediately go into each affected account (bank, social media, etc.) and reset those passwords too, enabling 2FA wherever possible.
Should I delete my email account after being hacked?
Usually not necessary. In most cases, recovering the account, changing your password, and enabling 2FA is enough. Deleting the account can cause you to lose access to services linked to it.
Staying alert to these warning signs — and acting quickly when something feels off — is the best defense against the long-term damage a hacked email account can cause.