Cyber recovery guidance

Account compromised in South Africa? Plan your recovery.

Clear first steps for hacked email, compromised accounts, websites and devices, with the aim of connecting people in South Africa to appropriate local support.

Choose your area

Provinces in South Africa

Choose an area, then a city, town or settlement. Taken means a support provider has been assigned; Available means a provider listing has not yet been allocated. Check the town page for service details and availability.

Start here

Protect the accounts that control the rest

If you suspect an account or device has been compromised, use a separate trusted device to coordinate recovery. Secure your main email and its recovery details first, then review important banking, website and business accounts. Remove unfamiliar sessions and strengthen multi-factor authentication where you can safely do so.

If money may be at risk, contact your bank using the number on your card or its official website. Keep payment references, login alerts, screenshots and original messages. Avoid deleting evidence or wiping a device before the recovery options have been reviewed.

Hacked email or account

Use the service provider’s official recovery process. Review recovery addresses, forwarding rules and active sessions after access is restored.

Website or domain affected

Identify who controls the registrar, DNS and hosting. Confirm backup access and who is responsible for restoring the site before making changes.

Business systems affected

Contact your existing IT provider using a trusted channel. Ask for urgent incident handling and confirm who can approve changes and recovery costs.

Recovery support across South Africa

Our planned coverage includes Johannesburg, Cape Town, Durban, Pretoria and communities across South Africa. A country listing does not mean a technician is currently available in every town or island.

For a business incident, contact the person who manages your email, hosting or IT systems. Confirm who can suspend suspicious access, preserve logs and authorise recovery costs.

When a provider is allocated, check their contact details and agreed support hours before calling. Do not send passwords, recovery codes or private incident information to Been Hacked Fix: any assessment should be arranged directly with your chosen provider.

South African Police Service crime-reporting guidance. Reporting an incident is separate from appointing a recovery technician.