A hacked email account matters more than it seems: it is the key to password resets for the bank, Amazon and everything else. Go in this order.
1. Get back in and lock the door
- Change the password from a device you trust. Make it new, long, and not used anywhere else.
- Turn on 2-step verification (in Gmail: Google Account → Security). A text code to their phone is far better than nothing.
- Sign out every other session (Google Account → Security → Your devices).
2. Look for what the hacker left behind
- Forwarding: Gmail Settings → Forwarding. Remove any address you do not recognise.
- Filters: Settings → Filters. Hackers add rules that delete or hide bank alerts.
- Recovery email and phone: make sure they are your parent's (or yours).
- Sent mail: see what was sent, and to whom.
3. Protect the money
- Call the bank and card companies, using the number on the card. Ask about new payees or changes.
- Change passwords on accounts that use this email to reset, starting with banking.
- Consider a free credit freeze at Equifax, Experian and TransUnion.
4. Warn their contacts
Send a short note: "My email was hacked on [date]. Ignore any request for money or gift cards that came from me." Hacked accounts are used to scam friends next.
5. Stop the next one
Most hacks start with a fake sign-in page in an email. A scam filter that catches those is the best prevention: Inbox Hero quarantines fake sign-in emails into a Fraud folder and puts a warning on doubtful ones. Add your parent's Gmail to your account and you will see what gets caught.
Live from Inbox Hero
Real totals across every inbox Inbox Hero protects: emails checked, flagged as suspicious, scams blocked and AI-written emails spotted. Updated Oct 28, 9:01 AM PT.
| Checked | Flagged | Blocked | AI-written | |
|---|---|---|---|---|
| Today | 1,271 | 4 | 3 | 484 |
| Last 30 days | 36,743 | 26 | 11 | 1,514 |
Frequently asked questions
What should I do first if my parent's email is hacked?
Change the password from a trusted device, turn on 2-step verification, and sign out all other sessions. Then check forwarding, filters and recovery details for anything the hacker added.
How do I know if a hacker set up email forwarding?
In Gmail open Settings, then Forwarding and POP/IMAP, and check for unknown forwarding addresses. Also check Filters for rules that forward or delete mail.
Should I warn their contacts?
Yes. Hacked accounts are used to send money requests to friends and family. A short warning email prevents the next victim.
How do I stop it happening again?
Use a unique password with 2-step verification, and filter out fake sign-in emails before they arrive. Inbox Hero quarantines them automatically on Gmail, Yahoo, AOL and iCloud.
Take back your inbox today
Connect Gmail or any mailbox in one click. Inbox Hero files the noise, drafts your replies, and quarantines phishing. It is free for 30 days ($0 today).
Get started free