Hacked? Don’t Panic – MoneyMagpie’s Full Guide To What To Do If Your Accounts Are Compromised
Reading Time: 6 minutesMoneyMagpie warning
If you receive a message that appears to be from Jasmine, Ruby or MoneyMagpie asking you to download something, hand over personal details, send money or click an unexpected link, do not engage.
Go directly to the official MoneyMagpie website or known legitimate accounts instead.
What happened?
Jasmine Birtles’ X account was hacked by scammers who then used the account to send suspicious messages to followers.
The messages encouraged people to download files or interact with links that did not come from Jasmine herself.
Meanwhile, Ruby Layram also experienced security concerns surrounding online accounts this week, prompting the MoneyMagpie team to strengthen protections even further across all platforms.
“It was deeply unsettling because the messages looked genuine to people receiving them. That’s the frightening thing about modern hacking — scammers often rely on trust and familiarity rather than obvious warning signs.”
Jasmine Birtles, MoneyMagpie founder
“Please only ever follow my legitimate accounts and remember that I would never, ever ask anybody for personal details, passwords, banking information or downloads through direct messages. If something feels unusual, always double check before clicking anything.”
Jasmine Birtles
Why do hackers target accounts like these?
Many people assume hackers only target celebrities, huge corporations or people with lots of money — but that is no longer true.
In reality, scammers often target trusted public-facing accounts because they already have something incredibly valuable: credibility.
If a follower sees a message coming from somebody they recognise and trust, they are far more likely to click a link, download a file or respond quickly without questioning it.
Why scammers may target social media and email accounts
- To spread phishing links and malware
- To trick followers into downloading harmful files
- To steal passwords and login details
- To impersonate trusted people
- To run fake investment or money-making schemes
- To gain access to linked accounts
- To steal personal or financial information
- To sell hacked accounts online
In some cases, scammers are not even interested in the original account itself — they are interested in the people connected to it.
That means followers, friends, clients, colleagues and family members can all potentially become targets too.
What information could be at risk?
The level of risk depends on which account has been compromised and how quickly the issue is caught.
While not every hack leads to serious personal data exposure, scammers often look for anything that can help them either make money or gain further access elsewhere.
Potentially exposed information may include:
- Email addresses
- Phone numbers
- Private messages or DMs
- Saved passwords
- Linked payment methods
- Personal photos or files
- Business contacts
- Location information
- Security questions and recovery details
If scammers gain access to one account, they may then attempt to access others using password resets, saved login details or impersonation tactics.
That is why experts recommend treating every hack seriously — even if it initially appears minor.
“People often underestimate how much personal information is tied to a single account nowadays,” says Ruby Layram. “Your social media, email and phone number can all act like pieces of a puzzle for scammers trying to access more of your digital life.”
Ruby Layram, MoneyMagpie Investment Editor
Why these scams work
Modern scams are no longer always full of spelling mistakes and obvious red flags. Hackers can now make messages look frighteningly convincing.
Hackers may:
- Clone real profiles
- Mimic genuine writing styles
- Hijack trusted accounts
- Use urgency and panic
- Send convincing fake login pages
- Ask people to download files or click links
Once inside an account, scammers often target friends, followers and contacts because people are naturally more likely to trust someone they recognise.
The first thing to do if you think you’ve been hacked
If you notice strange activity, act immediately. Time is crucial.
Warning signs include:
- Strange messages being sent from your account
- Password reset emails you did not request
- Login alerts from unfamiliar devices
- Suddenly losing access to your account
- Unusual purchases or transactions
- Friends saying they have received odd messages from you
Step 1: Change your passwords immediately
If you still have access to the account, change your password straight away.
Do this first:
- Change your password
- Log out of all devices
- Remove unknown devices from your account
- Update your recovery email and phone number
- Never reuse that password anywhere else
If one password has been compromised and reused elsewhere, hackers may try it across email, shopping, banking and social media accounts within minutes.
Step 2: Secure your email account
Your email account is often the gateway to everything else. If scammers gain access to your email, they may be able to reset passwords for your other accounts.
Check your email settings for:
- Recovery email addresses you do not recognise
- Recovery phone numbers you did not add
- Unfamiliar logged-in devices
- Email forwarding rules you did not set up
- Suspicious deleted or sent emails
Step 3: Turn on two-factor authentication
Two-factor authentication, often called 2FA, adds an extra security step alongside your password.
This might be a code sent to your phone, an authentication app, or approval through fingerprint or Face ID.
“One of the biggest lessons from all of this is that passwords alone simply aren’t enough anymore. Extra layers of security can make a huge difference.”
Ruby Layram, MoneyMagpie Investment Editor
Turn on 2FA for:
- Email accounts
- Social media accounts
- Banking apps
- PayPal
- Amazon and shopping accounts
- Investment platforms
- Cloud storage
Step 4: Contact your bank if money may be at risk
If there is any chance your banking details, cards or payment accounts have been exposed, contact your bank immediately.
Banking safety checklist:
- Call your bank using the number on your card or official app
- Freeze cards if necessary
- Check recent transactions
- Change banking app passwords
- Ask about extra fraud monitoring
Never use phone numbers sent in suspicious emails or texts. Go directly through your bank’s official app or website.
Step 5: Warn your contacts
If your social media, email or messaging account has been compromised, warn people quickly.
Hackers may use your name and profile to send fake investment schemes, urgent money requests, phishing links or dangerous downloads.
Message to send your contacts
“Please do not click any links, download anything or respond to any strange messages that appear to have come from me. My account may have been compromised and I am working to secure it.”
Step 6: Scan your devices
Run security checks across your phone, tablet, laptop and desktop computer.
Check for:
- Unknown apps
- Suspicious browser extensions
- Unrecognised software
- Out-of-date operating systems
- Pending security updates
Many security updates patch vulnerabilities that hackers actively target, so do not ignore update reminders.
Step 7: Watch out for recovery scams
Sadly, scammers often target victims again after a hack.
You may receive fake support emails, calls pretending to be from tech companies, compensation scams or messages claiming they can recover your account for a fee.
“Scammers thrive on panic and urgency. If somebody pressures you to act immediately, stop and verify independently before doing anything.”
Jasmine Birtles
The biggest mistakes people make online
Avoid these common errors
- Reusing passwords: one leaked password can unlock several accounts.
- Clicking links in panic: especially fake delivery, banking or HMRC messages.
- Ignoring software updates: old devices can be easier to exploit.
- Trusting familiar accounts automatically: even genuine-looking profiles can be hacked.
- Sending personal details by DM: legitimate experts and companies should not ask for sensitive details this way.
What to do if someone messages you from a hacked account
If you receive a suspicious message:
- Do not click any links
- Do not download files
- Do not reply with personal information
- Contact the person another way if you know them
- Report the message to the platform
- Block the account if necessary
Where to report hacking and cybercrime
If your account has been hacked, or you have lost money, you can report it to the relevant platform, your bank and Action Fraud.
Useful reporting routes
- Action Fraud: for cybercrime and fraud reports in England, Wales and Northern Ireland
- Your bank: if cards, transfers or payment details may be affected
- The platform: such as X, Instagram, Facebook, WhatsApp or email provider
- Police Scotland: if you are in Scotland
Final thought
Being hacked can feel invasive and frightening, but it is becoming increasingly common — and it can happen to anyone.
What matters most is acting quickly, strengthening your security, warning others and learning from the experience.
As scammers become more sophisticated, digital caution is now just as important as locking your front door.
MoneyMagpie reminder
Jasmine Birtles, Ruby Layram and MoneyMagpie will never ask readers or followers to send passwords, personal banking details or private security information by direct message.
If you are ever unsure, go directly to MoneyMagpie.com or the official social media accounts rather than clicking links in messages.
Also follow Jasmine on X here



