What should I do if someone else got into my account?
Act quickly, in this order.
1. Secure your email
Anyone who can read your email can get a sign-in code. Change your email account's password and turn on its own two-step verification.
2. Add an authenticator app
If you can still sign in, open Profile, then Security, and set up an authenticator app. Then a sign-in also needs a code from your phone. See How does two-factor authentication work?
3. Check your account
- Edit profile: check your name, username, bio and photos.
- Cards: remove any card you don't recognize.
- Purchases, Billing history and Wallet: look for anything you didn't do.
- Creators: check Wallet and withdrawals for withdrawals you didn't ask for.
4. Tell us
Contact us, choose My account or signing in, and tell us the email address on the account, what happened and any charges you didn't make. Do this even if you've got back in, so we can check the account.
If you can't get back in
Contact us in the same way. If someone has changed the email on your account, tell us the old address too.
The policy behind this
Last reviewed 22 October 2026