Hacked? Your Emergency Response Plan
It can happen to anyone: a strange login alert, money missing from Easypaisa, your WhatsApp sending messages you didn't write, or a friend asking why you sent them a weird link. Panic is the enemy — a clear plan is your best defense. This guide gives you exactly that: how to recognize a hack, what to do in the first hour, how to recover your most important accounts, and how to make sure it doesn't happen again.
Signs You've Been Hacked
- Login alerts for sessions you don't recognize (check Gmail → Security → Your devices, Facebook → Settings → Security and login).
- Password change or "welcome" emails you didn't trigger.
- Messages or posts sent from your accounts that you didn't write.
- Money missing from your bank, Easypaisa, or JazzCash, or transactions you don't recognize.
- Your phone behaving strangely: battery draining fast, overheating, pop-up ads on the home screen, apps you didn't install, or mobile data being used up unusually quickly.
- Friends receiving scam messages "from you" — a classic sign your WhatsApp or Facebook was hijacked.
- Being locked out of your own account because the password or recovery email was changed.
Immediate Steps: The First Hour
- Disconnect the compromised device from the internet (turn on airplane mode). This stops active data theft and prevents the attacker from seeing your recovery attempts.
- Use a clean device — a family member's phone or a trusted computer — for all recovery work. Never change passwords on a device you suspect is infected; the attacker may be watching.
- Change passwords, most important first: email first (it's the key to everything else), then banking/mobile money, then social media. Use strong, unique passwords — this is where a password manager earns its keep.
- Turn on two-factor authentication everywhere it was missing, especially email and WhatsApp.
- Call your bank / Easypaisa (3737) / JazzCash (4444) immediately if money is involved. Ask them to freeze suspicious transactions and note a complaint reference number.
- Log out all sessions. Gmail, Facebook, and WhatsApp all let you remotely sign out every device — do it.
- Warn your contacts. A quick message to family and close friends ("my WhatsApp was hacked, don't send money to any request from my number") stops the attack from spreading.
Recovering Key Accounts
Google/Gmail: go to google.com → "Forgot password" and follow account recovery. Google will ask verification questions — answer from a device and location you've used before. Once in, check recovery email/phone, remove unknown devices, and enable 2-Step Verification.
WhatsApp: reinstall and verify with your number — this automatically logs out the hijacker. Then immediately enable two-step verification (Settings → Account → Two-step verification) with an email address. If the attacker enabled two-step verification before you, you'll need to wait out the 7-day reset period — contact WhatsApp support through the app's Help section.
Facebook/Instagram: use facebook.com/hacked, which walks you through securing the account step by step. Remove unrecognized apps and sessions afterward.
Easypaisa/JazzCash: call the helpline, verify your identity with your CNIC, and ask them to block the account and reverse unauthorized transactions. Visit a franchise or service center with your original CNIC if phone verification isn't enough.
When to Factory Reset
If your phone shows signs of deep infection — persistent pop-ups, unknown apps reinstalling themselves, or banking trojans suspected — a factory reset is the reliable fix. First back up your photos and important files to Google Drive or a computer (not a full system backup, which could carry the malware back). Then go to Settings → System → Reset → Erase all data. After the reset, reinstall apps only from the Play Store, restore files selectively, and change your important passwords from the clean device. A reset is a last resort, not a first step — try removing suspicious apps and running Play Protect first.
Preventing the Next Attack
- Unique passwords everywhere — adopt a password manager so a single breach can't cascade.
- Two-factor authentication on everything important — especially email, WhatsApp, and mobile money.
- SIM PIN enabled so a stolen phone's SIM can't be abused for OTP interception.
- Think before you click — most hacks start with a phishing message, not a technical exploit. Re-read the phishing guide above.
- Keep your phone updated and install apps only from the Play Store.
- Regular checkups: once a month, review your Google account's signed-in devices and your bank statements. Catching a breach early limits the damage.
Being hacked feels violating, but it's recoverable — thousands of people go through it and come out safer. Work the plan step by step, secure one account at a time, and when you're back in control, put the prevention habits in place so there's no next time.