What to do if…
you are locked out of a key account because it demands verification you cannot complete

What to do now

1. Work out what kind of lockout this is (and treat it as potentially hostile until proven otherwise).

   • If you received unexpected “verification” prompts, password reset emails, SIM change notices, or new-device alerts, assume someone may be trying to take over the account and move faster on security steps below.

2. Secure the “keys to the keys” first: your email account and your phone number.

   • If the locked account is tied to an email inbox you still control, sign into that inbox first (ideally on a device you’ve used before), change its password, and turn on 2-step verification.
   • If you’ve lost access to your phone number (or your phone suddenly lost signal unexpectedly), contact your mobile network provider urgently from another phone to regain control of the number and lock down your mobile account (this helps stop SMS-code interception).

3. Use the provider’s official recovery path—look for alternate verification methods.

   • On the provider’s official website/app, look specifically for options like: “Try another way,” “I no longer have access,” “Use backup codes,” “Use a trusted device,” “Use passkey,” or “Contact support for account recovery.”
   • Try from a previously trusted device + usual location + usual browser (this can reduce verification hurdles).
   • If you have recovery codes saved (printed, notes app, password manager), use them.

4. If this is a work/school account, stop solo troubleshooting and go to the administrator.

   • Contact your organisation’s IT/helpdesk and ask for an account recovery / identity verification override. Many systems require an admin action once you’re stuck in a verification loop.

5. If it’s a bank/financial/benefits account: switch to the phone route and ask for a secure alternative.

   • Use the bank’s official phone number (from the back of the card, official paperwork, or their official website you already know) and explain: “I can’t complete your verification step. I need an alternative method or in-branch/postal verification.”
   • Ask them to note the account and to confirm any temporary safety blocks they can apply while access is being restored.

6. Start a simple “evidence log” now (two minutes).

   • Write down: date/time you were locked out, what verification was demanded, any error messages, reference/ticket numbers, and which contact channels you used.

7. If you suspect fraud or you’ve lost money, report it using the right UK route.

   • If the crime is happening now or you’re in immediate danger: call 999.
   • England, Wales, or Northern Ireland: report fraud/cybercrime via the national online reporting service (often referred to as Action Fraud / “Report Fraud”).
   • Scotland: report to Police Scotland on 101.
   • Keep any report/reference number.

8. If you’re stuck because they say you “can’t verify,” consider a Subject Access Request (SAR) for your records (not as a guaranteed unlock).

   • If the organisation is UK-based (or otherwise subject to UK GDPR), you can make a SAR to request a copy of personal data they hold about you (e.g., account profile data, audit logs, correspondence).
   • This may help you show account history and support escalation, but it won’t necessarily restore access if they still can’t verify you.
   • Timing expectation: organisations normally respond within one month once they have enough information/ID; in some cases they can take longer for complex requests.

9. If the account is essential and support is going nowhere, use the provider’s formal complaints/escalation route.

   • For many regulated financial firms, you usually complain to the firm first. If you get a final response you’re not happy with, or you’ve had no response after 8 weeks, you can generally refer the complaint to the Financial Ombudsman Service.