I entered my password
After entering credentials on a possibly fake page
Check the device and email account too
Recovering only the social account may leave the original cause in place and allow another compromise.
- 1Preserve the details
Record the notification, URL, sender, time, and actions you took with screenshots or notes.
- 2Secure the account from a trusted device
Change the password, log out all sessions, and review 2FA and recovery methods.
- 3Review connected access and devices
Check OAuth apps, bots, browser extensions, installed software, and download history.
- 4Warn affected people
Tell contacts and administrators not to trust unexpected messages sent from your account.