Been Hacked Fix UK recovery guide

Been Hacked? What to Do Next

Follow these steps in order to contain the incident, protect your money and accounts, preserve useful evidence and begin a safe recovery.

Prepared and reviewed by IT Life-Raft
UK-based IT support and cyber recovery guidance. Last reviewed September 2026.

1

Disconnect the affected device

Turn off Wi-Fi or unplug the network cable. This can interrupt an attacker and reduce further data loss.

2

Use a clean device

From another trusted phone or computer, change the password for your main email account first, then banking, shopping and social accounts.

3

Enable multi-factor authentication

Add app-based or passkey protection wherever possible. Review recovery email addresses, phone numbers and active sessions.

4

Contact your bank if money is at risk

Tell the bank immediately about unfamiliar payments or exposed card details. In the UK, report fraud to Action Fraud as appropriate.

5

Scan and clean every affected device

Run a full malware scan, remove unknown programs and browser extensions, apply operating-system updates and restart.

6

Review, monitor and protect

Check email forwarding rules, account activity and backups. Continue monitoring accounts and credit reports for unexpected changes.

Need guided help?

The Been Hacked Fix UK toolkit provides a straightforward recovery process, with UK-based support options when you need extra help.

⬇️ Download Toolkit

Report and recover safely in the UK

Use the NCSC response and recovery guide for independent advice. If money has been lost or cyber crime has occurred, report it through the police-led Report Fraud service. Organisations should also assess whether the incident must be reported to the ICO.

Don’t Wait Until It Gets Worse.

Recover now and secure your devices for the future.