If you've been scammedAll devicesLast reviewed 24 Oct 2026
Which passwords to change first after a scam
Email first, then banking, then everything else.
The order matters
- Email — whoever controls your email can reset everything else.
- Banking and PayPal — call your bank too.
- myGov and other government logins.
- Shopping, social media and everything else.
Tips
- Change passwords from a device the scammer didn't touch.
- Use a different password for each account — a password manager makes this easy.
- Turn on two-step login as you go.