Discovering that one of your accounts has been hacked can be unsettling. It is also increasingly commonplace. Even people who practice good security habits can become victims. According to the FBI’s 2025 Internet Crime Report, the Bureau receives nearly 3,000 cybercrime complaints every day. In 2025, those reports topped one million for the first time.
At CDF Capital, we believe wise digital stewardship is part of protecting what God has entrusted to you. That includes knowing exactly what to do when something goes wrong. If you think one of your accounts has been hacked, here are seven steps to take.
1. Change Your Passwords
When updating passwords, use a device and internet connection you know you can trust. If you suspect malware on your computer, disconnect it from the internet until you can scan it with security software, and reset your passwords from a different device.
Start with your email account, since it controls password resets for many of your other accounts. Secure it first, even if it was not the account that was hacked. Attackers who reach your email look for messages from banks, investment firms, and other services.
Then, change the password on the hacked account. If you used that same password anywhere else, change it there, too. Reused passwords are one of the most common ways a single breach spreads to other accounts.
And wherever possible, set up multi-factor authentication on your accounts. An authenticator app or passkey offers stronger protection than a text-message code.
2. Review Your Settings for Changes
Open your security settings and review your recovery phone number, email, and any forwarding rules on your account. Remove any information and devices you didn’t add. Then use the “sign out everywhere” option to close any active sessions.
3. Contact Your Financial Institution
If one of your financial accounts has been affected, contact your bank or financial institution using the official channels listed on its website. Their fraud and security teams handle these situations every day. They can review your account with you and monitor for suspicious activity. They can also guide you through the next steps, such as receiving a new card.
4. Warn Your Contacts
A hacked email or social media account is often used to target your contacts. Send a message or make a post to let your family and friends know not to trust links, requests, or messages that appear to come from you.
5. Report What Happened
If someone used your personal information, report it at IdentityTheft.gov for a recovery plan. Cyber-enabled fraud can also be reported to the FBI’s Internet Crime Complaint Center.
6. Start Monitoring Your Accounts
Review recent transactions across all of your accounts. Dispute anything unfamiliar. You can also set up transaction alerts to catch anything unusual early.
7. Set Up a Fraud Alert or Credit Freeze
If personal information was exposed, you have two options at the credit bureaus, and they work differently. A fraud alert tells lenders to take extra steps to verify your identity before opening new credit in your name. It is free, and you only need to contact one of the three bureaus. That bureau is required to notify the other two.
A credit freeze restricts access to your credit report, which makes it difficult for someone to open new credit in your name. A freeze is also free, but you have to place it with Equifax, Experian, and TransUnion separately.
Wise Stewardship in a Digital World
Responding well to a breach is part of paying attention to what God has placed in your care. If you ever have questions about the security of your CDF Capital account, reach out to us directly. We are here to walk with you every step of the way.
Stay alert.
Stay wise.
Stay CyberSmart.
