Safety first

If someone may be monitoring your device, the safest option is to use a device they cannot access, a friend’s phone or a library computer. If that is not possible, use incognito or private browsing mode and clear your browser history after visiting. Incognito does not hide activity from spyware installed on the device itself.

If you need to talk to someone nowRegion

988 Suicide & Crisis Lifeline, call 988 or text 98824/7 · Call or text 988. Free, confidential, for any kind of crisis.
National Domestic Violence Hotline, call 1-800-799-7233 or text START to 8878824/7 · Free, confidential. Over 200 languages via interpreters.
love is respect, call 1-866-331-9474 or text LOVEIS to 2252224/7 · For teens and young adults in dating relationships.
Crisis Text Line or text HOME to 74174124/7 · Text-based crisis counseling.
RAINN National Sexual Assault Hotline, call 1-800-656-4673 or text HOPE to 6467324/7 · Free, confidential. Connects to a local sexual assault service provider.
The Trevor Project, call 1-866-488-7386 or text START to 67867824/7 · For LGBTQ+ young people. Free and confidential, by phone, text, or chat.
Trans Lifeline, call 1-877-565-8860Check current hours on their site · Trans peer support, run by and for trans people. Does not call police without consent.

Browse all crisis and legal resources by country →

Recovered Archive / Safety

Account Takeover and Impersonation

Account takeover means someone gains access to your email, social media, banking, or other accounts without your permission. Impersonation means someone creates a fake account in your name.

Both are used to control, isolate, and damage survivors. An abuser who has your password, or who set up your account, does not need to hack anything. They already have the keys.

What it is

Account takeover can happen through password guessing (abusers often know your patterns), shared accounts from the relationship, phishing emails designed to steal your login, or spyware capturing your keystrokes.

Impersonation is simpler: someone creates a new account using your name, photo, and details, then contacts your friends, family, or employer as you.

How it is used against survivors

▌Monitoring. The abuser reads your messages, contacts, and activity without your knowledge.
▌Isolation. The abuser deletes contacts, sends messages as you that damage relationships, or blocks people from your account.
▌Reputation damage. Fake accounts post damaging content in your name, or your real account is used to send harmful messages to your contacts.
▌Financial access. Banking or payment accounts are drained or used for fraudulent purchases.
▌Evidence destruction. The abuser deletes messages, photos, or records you need for legal action.
▌Lockout. The abuser changes your password and recovery info, locking you out of your own accounts.

Warning signs

▌You cannot log into an account you own.
▌You get "new device" or "unusual activity" alerts you did not trigger.
▌Friends or contacts mention messages from you that you did not send.
▌Your password or recovery information has been changed without your action.
▌You see accounts using your name and photo that you did not create.
▌Your email forwarding rules have been modified to forward to an address you do not recognize.
▌Purchases or transactions appear that you did not make.

What you can do now

▌Change passwords from a safer device. If the abuser may have access to your current device, use a trusted friend's device or a library computer. Start with your email account, it is the gateway to everything else.
▌Turn on two-factor authentication. Use an authenticator app or a phone number the abuser does not control. Avoid SMS if the abuser has access to your phone.
▌Check account recovery options. Make sure the recovery email and phone number are yours, not the abuser's.
▌Review active sessions and connected devices. Sign out of all devices you do not recognize. Most platforms have this in security settings.
▌Check email forwarding and filter rules. Abusers sometimes set up silent forwarding to monitor your email.
▌Recover hacked accounts. Use the platform's account recovery flow. The FTC maintains links to major providers' recovery pages.
▌Report impersonation accounts. Use each platform's impersonation reporting tool. Provide proof of your identity.
▌Tell your contacts. Warn friends, family, and employer that fake accounts may contact them in your name. Ask them not to share information about you.
▌Freeze credit if financial accounts were accessed. See the identity theft guide for credit freeze steps.
▌Document everything. Screenshot fake accounts, suspicious activity alerts, and any messages sent in your name. This is evidence.

Related guides

When to get outside help

If your abuser has taken over your accounts, you may also be dealing with stalkerware, identity theft, or doxxing simultaneously. A domestic violence advocate or tech safety clinic can help you audit your devices and accounts safely. If financial accounts were accessed, file a report with the FTC and your bank's fraud department.

Browse crisis and legal resources →

If you know a resource, law, or tool that should be added here, use contact.