Signs of a hacked account and what to do

Hopefully you never have to worry about someone else accessing your account without your permission, but you can never be too safe. Here's how to recognize when someone else has signed in to your account, and the steps to regain control.

No matter what, if you think your account has been accessed without your permission, change your password immediately. If you don't have access to your account, use the Sign-in Helper to get back in.

Signs your account has been hacked

  • Your account information has changed without your knowledge. 
  • There are logins from locations you don't recognize on your recent activity page.
  • You aren't receiving expected emails.
  • Your Yahoo Mail account is sending spam.

What to do now

Stop your account from sending spam

Receiving spam is one thing. Getting reports of spam coming from your account is another. If your account's been hacked to send spam, you can fix it! The fastest way to stop your account from sending spam is to secure your account by creating a new, strong password or enabling Account Key

Report a forged (spoofed) email

Forged messages are emails that appear to be sent from your email address, but they're actually sent from an entirely different email account. If your Yahoo Mail is secure, but people are still getting spam that looks like it comes from your address, it's probably a forged, or "spoofed," email.

  1. View the full header of the email in question.
  2. From the last Received line of the full header, take note of the originating IP address.
    - This corresponds with the sender's Internet Service Provider (ISP).
  3. Conduct an IP lookup through a site like to determine which ISP provides the sender with Internet access.
  4. Contact the sender's ISP to request that appropriate action be taken.
Email providers can't prevent such forgery, but if fraud is identified, action can be taken.

Review your Yahoo Mail settings

Other commonly changed Yahoo Mail account settings:

Restore missing email, IMs, and Contacts

If you're missing emails, IMs, or Contacts, it's possible that you can restore your lost or deleted email and IMs. You may also be able to recover lost contacts.
Prevent hackers from accessing your account again, even after you change your password. Make sure your account stays secure.

Check your computer for malware

Malware can corrupt your system and capture sensitive information, like passwords and bank account numbers. There are several anti-malware programs you can find online that detect and remove malware on Macs and PCs. 


Thank you! Your feedback has successfully been submitted.

Please tell us why you didn't find this helpful.

Send Feedback