PanicStation.org
UK USA
uk Technology & digital loss apple id new device • apple account device added • google account new device • google account device setup • unknown device signing in • sign-in alert right now • someone logging into my account • account takeover in progress • suspicious login notification • new phone added to account • new laptop added to account • my account is being used • device added message • unexpected security alert • someone has my password • remove unknown device • sign out of all devices • change password immediately • two factor authentication prompt • google security checkup device

What to do if…
your Apple ID or Google Account shows a new device being set up right now

Short answer

Assume an account takeover is in progress: deny the sign-in (if you can) and change your password immediately from a device you already trust, then remove/sign out anything you don’t recognise.

Do not do these things

  • Don’t tap “Approve/Allow” on any prompt you didn’t start, even if it looks routine.
  • Don’t use links in alert emails/texts to “secure your account” — go directly via Settings (Apple) or your Google Account security page.
  • Don’t reuse an old password or a small variation of one.
  • Don’t try lots of different “fixes” on multiple devices at once — it’s easy to miss the one change that matters.
  • Don’t assume “2-step verification will handle it” — you still need to remove access and lock down recovery details.

What to do now

  1. Use a trusted device and a trusted connection.

    • Use your main phone/computer (one you recognise and control).
    • If you’re on public Wi-Fi, switch to mobile data or a trusted network before changing anything.

  2. If a sign-in prompt is on-screen, deny it.

    • Apple: choose “Don’t Allow” on the sign-in notification you don’t recognise.
    • Google: choose “No, it’s not me” / “Deny” on the security prompt.

  3. Change the password right away (trusted device only).

    • Apple Account: change your password from Settings on your iPhone/iPad/Mac (menu names vary by version).
    • Google Account: change your password from your Google Account security settings.
    • Use a brand-new password you’ve never used anywhere else.

  4. Do the “lockdown trio” immediately: devices/sessions, recovery info, stealth access.

    • Devices/sessions
      • Apple: review your Apple Account device list and remove anything you don’t recognise.
      • Google: Security → Your devices → Manage all devices and sign out of anything you don’t recognise.
    • Recovery info
      • Apple: confirm your trusted phone number(s) and trusted device(s) are yours.
      • Google: confirm your recovery email and recovery phone are yours; remove anything unfamiliar.
    • Stealth access checks
      • Gmail: check for unfamiliar forwarding and filters/rules that send copies of mail elsewhere.
      • Review connected third-party apps/services and remove anything you don’t recognise.

  5. Check your Apple/Google account details for changes you didn’t make.

    • Look for unfamiliar email addresses, phone numbers, or sign-in methods added to the account.
    • If your phone suddenly lost service (or you’re getting SIM/number change messages), contact your mobile network provider promptly — don’t assume it’s “just a glitch”.

  6. If money could be at risk, do a fast payment check.

    • Review recent purchases/subscriptions and saved payment methods tied to your Apple/Google account.
    • If you see unauthorised charges, contact your card provider/bank immediately.

  7. If you can’t regain control quickly, use official account recovery/support.

    • Use Apple/Google’s official recovery flows from a trusted device.
    • Avoid “sponsored” lookalike results if you’re searching — type the address you know, or use the in-app Settings routes.

  8. If you’ve lost money or this is fraud in the UK, report it.

    • England/Wales/Northern Ireland: report cybercrime/fraud via Report Fraud (police reporting service).
    • Scotland: if you’ve lost money or need to report, contact Police Scotland (101 for non-emergency; 999 for emergency).
    • Save basic details now (time of alert, screenshots if safe, what changed) — it helps if you need support later.

What can wait

  • You don’t need to work out how they got in right now.
  • You don’t need to message the unknown device/user.
  • You don’t need to reset every device today — focus on password + devices/sessions + recovery info + forwarding/filters first.
  • You don’t need to decide about reporting immediately unless money is actively leaving your accounts.

Important reassurance

This kind of “new device” alert is designed to make you react fast — it’s normal to feel shaky or scattered. Taking a few focused steps can stop the immediate access and prevent quick re-entry.

Scope note

These are first steps to interrupt an in-progress sign-in and reduce immediate harm. If you see repeated re-entry, multiple accounts affected, or financial loss, you may need additional help from the provider and your bank.

Important note

This is general information, not legal or professional advice. If you’re unsure a prompt or message is genuine, default to caution: deny/close it and go directly to your account settings on a trusted device.

Additional Resources
Support us