If you think your email account may have been compromised, it is important to act quickly. A compromised mailbox can be used to access sensitive information, send spam, impersonate you, or attempt fraud against your customers, suppliers, or colleagues.
Signs that your email account may have been compromised include:
- Emails being sent from your account that you did not write
- Password reset emails you did not request
- Missing emails or unexpected deleted items
- New forwarding rules or filters you did not create
- People telling you they have received suspicious emails from you
- Your password no longer working
- Unusual login alerts or access from unfamiliar locations
- Unexpected changes to your email signature or account settings
If you suspect your account has been compromised, you should change your email password immediately. Use a strong, unique password that you do not use for any other service.
You should also check your mailbox settings for any forwarding rules, filters, auto-replies, or signatures that you do not recognise. Attackers sometimes create hidden rules to forward copies of your emails to another address or to hide replies from your inbox.
If multi-factor authentication is available, enable it as soon as possible. MFA adds an extra layer of protection and makes it much harder for someone to access your account using only your password.
You should also let your colleagues know to be cautious of any unusual emails that may have come from your account. If your account has been used to send payment requests, invoice changes, or file links, these should be treated as suspicious until verified.
If your mailbox is hosted or supported by Fastnet, please contact the Fastnet Helpdesk as soon as possible. We can advise on the next steps and help check for any obvious signs of misuse.
When contacting us, please provide:
- The affected email address
- When you first noticed the issue
- Any suspicious emails or alerts received
- Whether any unusual emails have been sent from the account
- Whether you have already changed the password
- Screenshots or examples, where available
Acting quickly can help reduce the risk of further access, data loss, or fraud.