If you think your computer has been hacked, disconnect it from the internet right away, stop using it for anything sensitive like banking, and from a different device change the passwords on your most important accounts, starting with your email. Then run a trusted security scan, or get help from someone who handles security, before you trust the machine again. What you do in the first hour decides how much a hacker can steal or control, so move quickly and calmly.
How do I know if my computer is actually hacked?
Real signs of a compromise usually show up together, not alone:
- Your cursor moves, windows open, or text types on its own.
- You are locked out of your own account, or your password suddenly "stops working."
- Friends say they got strange emails or messages from you that you never sent.
- New programs, toolbars, or browser extensions appear that you did not install.
- Your security software is turned off and will not turn back on.
- A full-screen message demands payment to unlock your files. That one is ransomware.
One slow afternoon or a single odd pop-up is usually nothing. A cluster of these signs at once is the real warning.
What should I do in the first 10 minutes?
- Disconnect from the internet. Unplug the network cable or turn off Wi-Fi. This cuts the attacker's remote access immediately.
- Stop banking and shopping on that device. Assume anything you type could be watched.
- Grab a second device you trust, such as your phone on cellular data or another computer, to do the next steps.
- Change your email password first. Email is the master key that can reset every other account, so it comes before your bank.
- Turn on two-step verification (also called two-factor authentication) on that email account while you are there.
- Then change passwords on banking and on any account that shared the old password.
Should I turn the computer off or leave it on?
For most home users, disconnecting from the internet is the important part, and you can then shut the computer down normally. The one exception: if you can see a ransomware message actively locking your files, shutting down can stop it from spreading. If the device is tied to anything legal, financial, or work related where you might later need proof of what happened, leave it as is and call a professional before wiping anything.
What do I do after the immediate steps?
- Run a full scan with reputable security software you already had installed, not a tool a pop-up told you to download.
- Check your email for sneaky settings the attacker may have left behind: forwarding rules, new "recovery" phone numbers, or app passwords. These are how hackers keep getting back in after you change your password.
- Review recent bank and card activity and report anything you do not recognize.
- Sign out of all other sessions on your important accounts and watch for logins you do not recognize.
When should I call a professional?
Get help if any of these are true: money or bank accounts may be involved, you cannot get back into your email, the machine still acts strange after a scan, it is ransomware, or you simply want certainty that the threat is gone and your accounts are locked back down. A clean virus scan does not always mean your accounts are safe, and that second half is where people get burned.
If you would rather not sort this out alone, we can help you do more than wipe the machine. Cybersecurity is all we do, in plain English, and we focus on securing the accounts behind the device (email, banking, recovery settings) so it does not happen again. No monthly contract required for a one-time problem.
Worried your computer or accounts have been hacked? Book a free 15-minute call → We help home users and families throughout Marion County, FL, including The Villages and On Top of the World.