My Account Was Hacked: Insecurity and Anxiety After a Hack

If your account was hacked: ways to cope with anxiety, insecurity, constant checking and shame after a hack, and how to rebuild your sense of digital safety.

When you pick up your phone in the morning, you see an email telling you your password has been changed. You cannot get into your account. A few minutes later a friend calls: "I got a message from you asking for money, was that you?" At that moment it feels like a punch in the stomach. Saying "my account was hacked" is not just about losing a password; it means your photos, your conversations, perhaps your business and part of your identity have fallen into a stranger's hands. Whether it is a social media, email or bank account, this experience leaves many people with insecurity and anxiety that last for weeks. In this article we look at why being hacked is so unsettling, the reactions that commonly follow, and how you can recover both practically and emotionally.

My Account Was Hacked: Why Does It Feel So Unsettling?

Our digital accounts are no longer just tools. Years of photos, conversations with family, work contacts and small traces of who we are sit in those accounts. When an account is taken over, people often compare it to a burglary at home. What disappears may not be a physical object, but the sense that your privacy has been trampled on is very similar.

Some features make this experience heavier:

• An invisible perpetrator: There is no face, no voice in front of you. Not knowing who has been in your account, from where or for how long leaves room for the mind to produce worst-case scenarios.
• Loss of control: The existence of someone speaking in your name and sending messages with your face creates a deep sense of helplessness.
• Uncertain scope: Questions such as "What else did they access? Did they read my messages? Can they get into my bank too?" continue even after the event is over.
• Others being affected too: The hacker sending fraudulent messages to people you know adds a sense of responsibility on top of your own loss.

When a bank account is taken over, a concrete financial loss and uncertainty are added to this. While questions such as whether the money will be refunded, how long it will take and whether the card can be used again await answers, the person watches the rent or bill dates approach. This waiting can be as draining as the event itself. In such a period, noting the date and time of every conversation with the bank makes the uncertainty at least somewhat more manageable.

So rather than dismissing the anxiety that follows a hack by saying "You're overreacting, it's just an account", it should be seen as an understandable reaction to a real violation.

Common Reactions After Being Hacked

Although what people go through after an account takeover varies, some reactions are common:

• Panic in the first hours: Palpitations, shortness of breath, trembling hands, being unable to gather your thoughts.
• Constant alertness: Flinching at every notification on your phone, perceiving every email as an attack.
• Repeated checking: Checking your login history, bank transactions and password settings many times a day.
• Sleep problems: Waking at night to check your phone, or being unable to fall asleep for thinking about what happened.
• Shame and self-blame: Thoughts such as "How did I click on that link?" or "Not everyone uses the same password."
• Anger: Towards the attacker and also towards platforms you cannot reach to get your account back.
• Withdrawal from digital life: Quitting social media altogether, avoiding online shopping and banking.

Most of these reactions are intense in the first days and ease as the account is recovered and security measures are completed. In some people, however, the anxiety may continue to affect daily life even weeks after the event. For a general picture of how anxiety shows up in body and mind, you can read our article on anxiety symptoms.

Let's say a woman who sells her handmade jewellery through social media clicks on a link in a message headed "Your account will be closed due to a copyright violation". Within a few hours the account password changes, the profile name changes and the hacker demands money to give the account back. For her, this account is not just a social media profile but the source of a significant part of her income. What she has lost is her customers, her work and a business she has built over years. In the following weeks, even after she gets her account back, the first thing she does every morning on waking is look at the login notifications, and she is afraid to open new messages when they arrive.

My Account Was Hacked, What Should I Do in the First Hours?

In a moment of panic the mind scatters; so putting what needs to be done into a simple order both limits the damage and brings back a sense of control.

1. Secure your bank first. If a card is saved to the account, or if you use the same password for banking, call your bank.
2. Check your email. Your email account is the key to your other accounts. Change its password and turn on two-step verification.
3. Follow the platform's recovery steps. Social media platforms have account recovery pages; do not trust "we'll get your account back" offers outside official channels. These are often a second scam.
4. Inform the people you know. Through another channel, announce that your account has been taken over and that requests for money appearing to come from you should not be answered.
5. Keep records. Screenshots, suspicious messages and dates are useful for any official applications you may need to make.
6. If there is blackmail, make an official report. If the hacker is threatening you with personal information or your messages, go to the police or the Chief Public Prosecutor's Office without paying.

While taking these steps, give yourself short breaks. Staying in front of a screen for hours can make the panic grow. Asking someone close to you to be with you and taking the steps together helps you stay calm.

The Constant Checking Cycle: Security or Anxiety?

After you get your account back, it makes sense to review your security settings. In some people, however, this checking continues after the event is over and turns into a cycle. Looking at the login history dozens of times a day, changing the same password again and again at short intervals, never letting the phone out of reach even for a moment, and a racing heart with every new notification are signs of this cycle.

Checking brings brief relief: "Nothing's wrong, I'm safe." But this relief passes quickly, and the need for the next check comes sooner. In this way checking turns into a habit that keeps anxiety alive instead of reducing it. We discuss situations in which anxiety and repetitive checking behaviours are more widespread and persistent in our article what is OCD; not every checking behaviour is OCD, but that article may help you tell the two apart.

A security measure is taken once and protects you; anxiety asks for a little more with every check.

Tie checking to a plan

One way to break the cycle is to tie checking to a specific time and frequency. For example, you might decide to review your security settings once a week, on a set day and time. Outside that, when the urge to check comes, try postponing it by telling yourself, "I'll look at eight o'clock this Friday." You will struggle in the first days; but every postponed check teaches your mind that you can be safe without checking.

Invest in real security

Part of the anxiety comes from the feeling that you are genuinely unprotected. Two-step verification, different and strong passwords for each account, using a password manager and not clicking unknown links reduce the real risks considerably. Once these measures are in place, remind yourself: "I've done what I can."

Simplify your notifications

After the event, every sound on your phone can ring like an alarm in your mind. Turning off unnecessary app notifications and leaving on only the security alerts from your bank and email account reduces the number of times you are startled during the day. This also makes it easier to notice a genuinely important alert when it comes, because your attention has not been used up among hundreds of ordinary notifications.

Don't withdraw from the digital world completely

Some people give up social media altogether after the event and stop using online banking. A short break can do you good, but long-term avoidance makes fear grow. After taking security measures, bringing use back slowly and deliberately is the way to rebuild your digital confidence.

Shame, Messages to People You Know and Blackmail

One of the hardest aspects of being hacked is that the event spills over onto others. The hacker may have asked your relatives for loans in your name, or sent strange messages to your work contacts. If someone close to you believed the message and sent money, the feeling of guilt becomes even heavier.

What needs to be remembered at this point is that you are a victim too. Giving the people you know a clear and calm explanation is usually met with far more understanding than you expect. There are many people who have experienced such events or know someone close to them who has.

Elderly family members, or acquaintances less familiar with technology, may find it harder to recognise a message sent in your name. Calling them and explaining the situation in your own voice is far more reassuring than a written announcement. These short calls also let you feel that you are not alone.

Situations involving blackmail bring a separate burden. The hacker may threaten to share your private messages or photos. In this case fear and shame can be very intense, and the person may consider quietly paying. Yet paying usually does not end the demands. When you face threats of this kind, it is important not to stay alone, to share it with someone you trust and to go to the official authorities. If thoughts of harming yourself arise, or you feel in immediate danger, call 112 (emergency services) straight away.

When Should You Seek Professional Support?

Anxiety after a hack is generally expected to ease within a few weeks. However, it can be helpful to turn to a mental health professional in the following situations:

• If, weeks after the event, you are still checking many times a day and it is exhausting you,
• If phone notifications, emails or messages trigger intense anxiety and panic,
• If your sleep pattern has been disrupted and you cannot concentrate on your work,
• If you have withdrawn completely from digital life and this is affecting your work or social relationships,
• If you are experiencing intense shame, helplessness or hopelessness because of blackmail or the sharing of personal information.

How Is Anxiety After a Hack Addressed in Therapy?

Cognitive behavioural therapy offers a structured path for working with anxiety after a hack. In the first stage, the thoughts feeding the person's anxiety are identified: "It could happen again at any moment", "Nothing is safe", "Everyone got hurt because of my mistake". How far these thoughts match reality is examined together, taking into account the security measures that have been put in place.

If there are repetitive checking behaviours, the aim is to reduce them gradually. The person experiences that periods without checking do not make anxiety rise forever but, on the contrary, reduce it over time. A similar path is followed for avoidance behaviours; the person returns to digital life in small, safe steps.

Skills aimed at calming the body's alarm state are also part of this process. Breathing exercises, muscle relaxation and small steps towards re-establishing a sleep routine are especially useful for people who have developed the habit of waking at night to check their phone. Even a simple change such as charging the phone outside the bedroom can reduce the state of alertness that lasts all night.

Shame and guilt are also important topics in therapy. Especially for people whose acquaintances were defrauded or who were subjected to blackmail, a non-judgemental space in which these feelings can be talked about speeds recovery. This work can be carried out face to face or online within the area of anxiety and panic.

Frequently Asked Questions

I got my account back but I still don't feel safe. Is that normal?

Yes. Getting the account back technically does not mean the sense of safety will return immediately too. The mind may stay on alert for a while longer. After taking the necessary measures, gradually reducing how often you check helps the sense of safety come back.

My business account was hacked and I lost income. How do I cope with this?

What you are experiencing in this case is both a financial and an emotional loss. It is important to give your customers a clear explanation, set up a temporary alternative channel and not carry the loss alone. The feeling that part of your work has been wiped out can trigger a grief reaction; give that room.

My child's or teenager's account was hacked. How can I support them?

For young people, a social media account is an important part of their friendships and identity. First listen without blaming them, then take the security steps together. The hacker having sent messages to their friends may cause the young person embarrassment at school; it is important to take this feeling seriously.

What can I do so that I don't get hacked again?

Using different, strong passwords for each account, turning on two-step verification, never sharing verification codes with anyone and not clicking links in urgent-sounding messages such as "your account will be closed" are the basic precautions. These measures reduce the risk considerably and ease your anxiety too.

• #hacking
• #cyber security
• #anxiety
• #insecurity
• #social media

Yazar

Eda Erkan Alapala

Klinik Psikolog. İstanbul Kent Üniversitesi Klinik Psikoloji Tezli Yüksek Lisans mezunu; bilişsel davranışçı terapi, çocuk merkezli oyun terapisi ve çocuk-ergen psikoterapisi alanlarında eğitimlerini tamamlamıştır.

Eğitimler