I shared my password — what now?

1. Sign out other sessions if the service allows it, then change the password from a device you trust.
2. Enable multi-factor authentication or a passkey immediately after the reset.
3. Review recent logins, device list, forwarding rules (email), and payment methods on the account.
4. Change the same password anywhere else you reused it.
5. If the password was for banking or email, prioritise those accounts first.

Sharing a password—on a fake login page, with a caller, or in chat—gives someone a foothold until you rotate credentials and add a second factor.

Email is high priority: whoever controls email can reset many other accounts.

Ignore follow-up messages that ask for the new password or one-time codes “to finish securing” the account.

If you installed remote-access software during the incident, treat that as a separate urgent cleanup.

• Callers asking for one-time codes right after your reset
• New forwarding rules or unknown devices on the account
• Links to “security portals” that again ask for the password

1. Use unique passwords or a password manager going forward
2. Prefer passkeys where available
3. Report phishing pages to the brand’s official abuse channel
4. Scan unfamiliar related links with Fraudly after accounts are secure

Fraudly cannot change your passwords or remove malware.

We provide decision support—not emergency account recovery.