PanicStation.org
UK USA
us Technology & digital loss

What to do if…
you are locked out of an account because you cannot complete a verification step

Produced and maintained by PanicStation.org Published: Last reviewed: Editorial policy USA guide

Short answer

Stop repeated attempts for now. Use the provider’s official recovery path, protect any recovery email or phone account you can still access, and check for signs that someone else may be trying to use the account.

Do not do these things

  • Don’t keep retrying codes or guessing answers.
  • Don’t use support links from ads, direct messages, unsolicited calls, or unexpected texts. Open the provider’s official site or app yourself.
  • Don’t pay anyone offering an account-recovery shortcut or verification bypass.
  • Don’t share one-time passcodes, authenticator approvals, backup codes, passwords, or screen-sharing access with anyone who contacts you unexpectedly.
  • Don’t delete messages, alerts, or case details while you are still checking what happened.

What to do now

  1. Open the provider’s official site or app yourself.

    • Use the provider’s account-recovery page or help section.
    • Look for options such as another verification method, a backup code, a passkey, a recovery email, a recovery phone number, or official support.

  2. Check calmly for signs of account takeover.

    • Look for password or username changes you did not make, authentication prompts you did not start, login alerts from an unknown device, or notices that recovery details changed.
    • If you see those signs, use the provider’s security or compromised-account recovery route rather than continuing ordinary login attempts.

  3. Protect your recovery email if you can still access it.

    • Change its password if you think it may be exposed.
    • Turn on multi-factor authentication if available.
    • Check for unknown forwarding rules, recovery-detail changes, and unfamiliar signed-in devices or sessions.

  4. Contact your mobile carrier promptly if your phone number may be involved.

    • Do this if you suddenly lost service, stopped receiving calls or texts, or received an unexpected notice about a SIM or phone-number change.
    • Ask whether your number is still attached to your account and what steps are available to secure the mobile account.

  5. Use the account’s appropriate official contact route.

    • For a workplace or school account, ask the administrator or helpdesk what authentication reset or re-enrollment route is available.
    • For a bank, credit-card, or other financial account, use the phone number on your card, statement, or the institution’s official website. Ask for an alternative verification route and what protective options are available while access is reviewed.

  6. Keep a short incident log for support or complaint use.

    • Record when the lockout started, the verification method requested, any error messages, unexpected alerts, case numbers, and the official channels you used.

  7. Use additional fraud-protection routes only when the signs fit.

    • If you suspect identity theft, use IdentityTheft.gov for a recovery plan.
    • If someone may be opening new credit accounts in your name, consider a credit freeze. A freeze is free and must be placed separately with Equifax, Experian, and TransUnion.
    • For an unresolved problem involving an eligible consumer financial product or service, contacting the company first is often useful. You may also submit a CFPB complaint.
    • If money was diverted or a fraudulent wire transfer occurred, contact your financial institution promptly to ask about a recall or reversal. You can also file a detailed complaint with IC3.

What can wait

  • You do not need to decide today whether to abandon the account.
  • You do not need to secure every account at once. Focus first on the locked account and the email or phone account that could control recovery.
  • You do not need to prove exactly what happened before contacting official support.

Important reassurance

A verification failure does not automatically mean that someone has taken over the account. New devices, changed phone numbers, travel, lost authenticators, and provider security checks can all interrupt access. Pausing repeated attempts and using official recovery routes is a sensible first step.

Scope note

These are first steps only. Recovery options vary by provider and account type, and later decisions may need specialist help.

Important note

This is general information, not legal, medical, financial, therapeutic, or other professional advice. If money, benefits, or personal safety may be at risk, prioritize the provider’s official contact route and appropriate fraud-protection steps.

Additional Resources

Closely connected guides that may be useful during the same situation or its immediate aftermath.

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us