What to do if…
your contacts list suddenly fills with unknown entries or random names

What to do now

1. Pause contacts syncing to stop more changes.

   • On the affected phone or computer, turn off Contacts syncing for the account that appears to be changing the list.
   • Keep the device able to receive sign-in codes or support calls if you need them.

2. Save a quick record before changing more.

   • Take screenshots showing examples of the unknown entries.
   • Note when you first noticed the change and whether you recently added an email account, work account, contacts app, or new device.
   • If the provider gives you an export or download option, save a copy of the current contacts before restoring or deleting anything.

3. Check whether this is coming from a synced account.

   • Open the contacts service in a web browser, such as iCloud.com, Google Contacts, Outlook People, or your work account’s contacts page.
   • If the same random contacts appear on the web, treat it as an account-side contacts problem, not just a phone display problem.
   • If the web version looks normal, the problem may be limited to one device, one app, or one local sync setting.

4. Look for account takeover warning signs.

   • Check for sign-in alerts you do not recognize.
   • Check for password reset emails you did not request.
   • Check whether recovery email addresses, recovery phone numbers, forwarding rules, or trusted devices were changed.
   • Check whether any unfamiliar apps have permission to read or manage contacts.

5. Secure the account that controls the contacts.

   • Change the password from a device you trust.
   • Turn on two-factor authentication, or confirm it is already on.
   • Remove devices you do not recognize from the account’s device list, where the provider offers that option.
   • Revoke third-party app access that can read, edit, import, or manage contacts.
   • If you cannot sign in, use the provider’s official account recovery page rather than links from emails or texts.

6. Check for a work, school, or directory source.

   • If this started after adding a work or school account, a device management profile, or a company app, it may be showing a directory or shared address list.
   • Contact your IT helpdesk before removing management profiles, work accounts, or required security apps.
   • Ask whether a directory sync, shared mailbox, or managed contacts setting was recently enabled.

7. Recover or clean up only after the account is safer.

   • For iCloud contacts, use iCloud.com Data Recovery and Restore Contacts if an earlier version is available. Create or keep a backup before restoring, because restoring can replace contacts across devices.
   • For Google Contacts, use Undo changes if the unwanted changes happened within the past 30 days. Permanently deleted contacts may not be recoverable.
   • Clean up from the web contacts view when possible, so you are fixing the source that syncs to your devices.

8. Report only if there is fraud, crime, or immediate danger.

   • If your account was used for fraud, money was taken, or you were scammed, report cyber-enabled crime through the official FBI IC3 site.
   • If someone is in immediate danger, call 911 or local police.
   • If identity or account fraud may be involved, use FTC consumer guidance to document what happened and protect your accounts.