PanicStation.org
UK USA
us Technology & digital loss

What to do if…
your messaging account is being registered or linked on a device you do not recognise

Produced and maintained by PanicStation.org Published: Last reviewed: Editorial policy USA guide

Short answer

Do not approve the registration or device link, and do not share any verification code, PIN, QR code, or approval prompt. From a device you trust, open the messaging service directly, remove unfamiliar sessions if possible, and secure the account and its recovery methods.

Do not do these things

  • Do not share a verification code or security PIN with someone who contacts you.
  • Do not approve a login, registration, device-linking request, or QR code you did not initiate.
  • Do not use a link or contact number from an unexpected security message.
  • Do not pay anyone who claims they can recover or protect the account.
  • Do not uninstall the app, delete the account, or erase the phone before checking the provider’s official recovery instructions.
  • Do not change security details on a device you believe may be compromised when another trusted device is available.

What to do now

  1. Deny or dismiss any registration, login, or device-linking request you did not start. If the alert remains visible, record its time, stated location, and device name without opening any included link.

  2. Open the official messaging app or type the provider’s official website address yourself on a device you trust. Look in the account’s security settings for linked devices, connected devices, active sessions, or logged-in devices.

  3. Remove the device you do not recognize. If the service does not let you remove one device, use its option to sign out of other devices or follow its official account-security instructions.

  4. Change the account password, registration PIN, or security PIN if the service offers one. Use a credential you have not used for another account, then enable two-factor or two-step verification if available.

  5. Check the recovery email address and phone number on the account. Remove any details you did not add, then secure the associated email, Apple, or Google account by reviewing its signed-in devices, changing its password if needed, and enabling two-factor authentication.

  6. Check whether your phone can still make calls, send texts, use mobile data, and receive verification messages. If service stopped unexpectedly or your carrier reports a SIM, eSIM, or number-port change, contact the carrier through its official app, website, or a number on your bill and ask it to restore control of the number.

  7. If you have been logged out, use only the messaging provider’s official account-recovery process. Do not give a code sent to your phone or email to a person offering to help.

  8. Review recent messages, profile changes, security alerts, and linked devices. If messages were sent without you, warn affected contacts through another trusted channel not to follow links, send money, or share codes.

  9. If someone used your personal information or the incident caused financial loss, contact the affected company promptly and use IdentityTheft.gov to create a recovery plan.

What can wait

You do not need to determine exactly how the attempt happened before securing the account. A factory reset, changing your phone number, reviewing every old message, and notifying every contact can usually wait unless you find evidence that your device, phone number, finances, or contacts are currently being misused.

Important reassurance

An unexpected verification code or device-linking alert may indicate an attempt rather than a completed takeover. Treat it seriously, but focus on denying access, removing unfamiliar sessions, securing recovery accounts, and checking that you still control your phone number.

Scope note

This guide covers immediate first steps only. Further device inspection, data recovery, workplace reporting, financial disputes, or account recovery may require help from the service provider, wireless carrier, employer, or a qualified cybersecurity professional.

Important note

This is general information, not cybersecurity, legal, financial, or other professional advice. Security features and recovery procedures vary between messaging services, devices, and wireless carriers.

Additional Resources

Closely connected guides that may be useful during the same situation or its immediate aftermath.

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us