What to do if…
your family sharing or purchase-sharing settings change and you did not change them
Short answer
Assume someone accessed your Apple/Google account: secure sign-in first (new password + 2FA + sign out other sessions), then review family/purchase sharing and payment methods to stop new charges.
Do not do these things
- Don’t use links from surprise emails/texts to “verify” or “unlock” anything — open the official app or type the official site yourself.
- Don’t start removing random devices/users before securing sign-in — you can trigger lockouts or miss how they’re getting back in.
- Don’t keep a shared payment method active “until you figure it out” if unauthorized purchases are happening.
- Don’t reuse the old password or a slight variation of it.
- Don’t rush into accusations; get control and records first.
What to do now
-
Stop new spending risk.
- If there are unauthorized charges, contact your card issuer/bank right away to dispute and ask what they can do to prevent further transactions (for example, freezing/locking the card in your banking app or issuing a replacement card).
- Remove/disable the shared family payment method temporarily if the platform allows it.
-
Secure the controlling account (Apple Account / Google Account) immediately.
- Change the password to a new, unique one.
- Turn on two-factor authentication (2FA).
- Use account security settings to sign out of other devices/sessions.
-
Remove “ways back in” so they can’t regain access. Do this from a device you trust.
- Verify recovery email(s) and phone number(s) are yours; remove anything unfamiliar.
- Review devices with account access and sign out unknown devices/sessions.
- Check the email account tied to resets for unexpected forwarding/filters or new recovery details.
-
Run a quick security review (often reveals the cause).
- Google: run Security Checkup (recent security events, devices, third-party access).
- Apple: review trusted devices/numbers and recent sign-in prompts in Apple Account settings.
-
Review and lock down family/purchase sharing settings.
- Apple: Settings → your name → Family (or Family Sharing). Confirm who is in the group, who the organiser is, and whether purchase sharing is enabled; remove unknown members and disable purchase sharing if needed.
- Google Play: Google Play → profile icon → Settings → Family. Review family group, Family Library settings, and purchase approval requirements; stop sharing/remove unknown members if needed.
-
Check purchase history and subscriptions once, then stop.
- Look for new subscriptions, “free trial” conversions, and in-app purchases.
- Cancel what you can from the platform’s subscriptions area after securing the account (so cancellation can’t be reversed).
-
If it involved fraud or persistent access, report it (USA path).
- You can file a report with the FBI’s Internet Crime Complaint Center (IC3) for cyber-enabled fraud/scams.
- Be careful: scammers create look-alike reporting portals. Type the official site yourself and avoid “sponsored” or unfamiliar domains.
What can wait
- You don’t need to decide today whether to permanently stop using family sharing — disabling purchase sharing temporarily is a valid safety move.
- You don’t need to do a deep audit of every device right now; first secure the account and stop spending.
- You don’t need to confront anyone immediately if you suspect someone you know; stabilize access and records first.
Important reassurance
Seeing settings change without your input is unsettling, but a disciplined sequence (secure sign-in → sign out others → verify recovery routes → lock down sharing) usually stops it quickly.
Scope note
This is “first response” guidance. If you’re locked out, the organiser role was changed, or access keeps recurring, the next step is platform support and formal dispute/reporting.
Important note
This is general information, not legal, financial, or cybersecurity professional advice. If you can’t verify something safely (like whether a device is yours), prioritize securing access and using official support paths.
Additional Resources
- https://consumer.ftc.gov/how-recover-your-hacked-email-or-social-media-account
- https://support.apple.com/en-us/102660
- https://support.apple.com/en-us/102652
- https://support.google.com/accounts/answer/3067630?hl=en
- https://myaccount.google.com/intro/security-checkup
- https://www.ic3.gov/
- https://www.fbi.gov/investigate/cyber