Account Recovery
What to Do If Your Account Recovery Phone Number Was Changed
A changed recovery phone number can be a serious sign, but it does not prove every account was taken over. Verify the change inside the official account, remove unknown recovery methods, update your password, and secure the email tied to the account.
Why this setting matters
A recovery phone number can be used to reset passwords, receive account alerts, and prove account ownership. If it changes without your permission, someone may be trying to make future recovery easier for themselves.
Do not use links in surprise emails to investigate the issue. Open the official app or website directly and review the security settings there.
- Open the official account page.
- Check recent security changes.
- Do not share verification codes.
What signs should you review?
Look for unknown devices, new recovery emails, unfamiliar phone numbers, changed passwords, connected apps, and alerts about sign-ins from places you do not recognize. Location data can be approximate, so compare the time, device, and action before drawing conclusions.
- Unknown device
- New recovery method
- Unexpected password change
- Suspicious connected app
What should never be entered into a checker?
Do not enter a current password, one-time code, recovery code, full government identifier, card number, or bank detail into an exposure checker. Search only identifiers you own or are authorized to manage.
Remove the unknown recovery method
If the account still lets you in, remove any phone number or recovery email you do not control. Add your trusted recovery method and save confirmation screenshots privately if you need a record.
- Remove unknown phone numbers.
- Restore trusted recovery options.
- Save private evidence.
Change the password safely
Change the password through the official account page. Use a unique password that was never used elsewhere, then sign out other sessions if the service offers that option.
- Use a unique password.
- Sign out other sessions.
- Avoid small password variations.
Secure the connected email
Your email account may control recovery for many other services. Review its forwarding rules, recovery methods, app permissions, and recent sign-ins before assuming the problem is isolated.
- Check email forwarding.
- Review connected apps.
- Enable multifactor authentication.
Use exposure context carefully
A 4safer search can help show whether an owned email appears in known exposure sources. It cannot prove who changed the recovery number, and a negative result means only that no known match was found in searched sources.
Frequently asked questions
Does a changed recovery phone mean I was hacked?
Not always, but it is a high-priority warning. Review the official account security page and remove anything you do not control.
Should I call the number that was added?
No. Use the platform's official recovery and support channels instead.
What account should I secure first?
Secure the affected account and the email address used to recover it.
Sources
This guide is reviewed against official guidance. External pages may be updated by their respective owners.