Deepak Gupta

Google Account or Gmail hacked: how to get it back

Go to accounts.google.com/signin/recovery from a phone or computer you usually sign in on, and answer every question as best you can. Once you are back in, change your password, sign out devices you don't know, and fix any recovery phone or email the attacker changed. Google says you can't call Google for this.

Do these 3 things now

1Open accounts.google.com/signin/recovery on a device and network you often use for Google, and follow the steps.Read to them:“Open accounts.google.com/signin/recovery on a device and network you often use for Google, and follow the steps.”
2Do not reply to anyone who offers to recover your account. You can't call Google for help to sign in, so a caller saying they are Google is not.Read to them:“Do not reply to anyone who offers to recover your account. You can't call Google for help to sign in, so a caller saying they are Google is not.”
3Change the password on any other site where you used the same password as your Google Account.Read to them:“Change the password on any other site where you used the same password as your Google Account.”

Start Google Account recovery

Official link: accounts.google.com

I am helping someone else

Helper mode: each step is written for you to read aloud. Let them tap and type on their own device; never ask them to send you a code. Send them this first.

01Is this you?

Your Google password stopped working and you didn't change it.
You got an alert about a password, recovery phone, or recovery email change you didn't make.
Gmail shows sent emails you didn't write, or a device you don't recognize is signed in.

Not quite? I just forgot my password · Google says my account is disabled · I got an alert but can still sign in · My phone suddenly lost signal

02Official recovery path

Go to accounts.google.com/signin/recovery (g.co/recover opens the same page) and enter your Gmail address.Read to them:“Go to accounts.google.com/signin/recovery (g.co/recover opens the same page) and enter your Gmail address.”source
Use a computer, phone, or tablet you often sign in with, in the browser you usually use, from a place you normally sign in, like home or work.Read to them:“Use a computer, phone, or tablet you often sign in with, in the browser you usually use, from a place you normally sign in, like home or work.”source
Answer every question. Don't skip any. If you are not sure, take your best guess. Google says wrong guesses won't kick you out.Read to them:“Answer every question. Don't skip any. If you are not sure, take your best guess. Google says wrong guesses won't kick you out.”source
If asked for your last password, enter the most recent one you remember. If you can't, enter an older one. Watch for typos and capital letters.Read to them:“If asked for your last password, enter the most recent one you remember. If you can't, enter an older one. Watch for typos and capital letters.”source
If Google sends a code to an email you can no longer open, select Try another way.Read to them:“If Google sends a code to an email you can no longer open, select Try another way.”source
Once you are in, open your Google Account and go to Security & sign-in. In the recent security events panel, select Review security events. For anything that isn't you, select No, it wasn't me and follow the steps.Read to them:“Once you are in, open your Google Account and go to Security & sign-in. In the recent security events panel, select Review security events. For anything that isn't you, select No, it wasn't me and follow the steps.”source
Under Your devices, select Manage all devices. Sign out of every device you don't recognize.Read to them:“Under Your devices, select Manage all devices. Sign out of every device you don't recognize.”Unconfirmed, test pendingsource
Change your password. Then fix anything you didn't set: recovery phone, recovery email, name, 2-Step Verification, or Location Sharing.Read to them:“Change your password. Then fix anything you didn't set: recovery phone, recovery email, name, 2-Step Verification, or Location Sharing.”source
In Gmail, remove any filters, forwarding, or mail delegation you didn't set up, so copies of your email stop going to the attacker.Read to them:“In Gmail, remove any filters, forwarding, or mail delegation you didn't set up, so copies of your email stop going to the attacker.”Unconfirmed, test pendingsource

Did that get you back in?

Yes

Lock it down now. Change the password, turn on two-step, sign out other devices. It takes about 15 minutes.

No

A.If you see "Google couldn't verify this account belongs to you", you can try again. Google says there's no limit to the number of times you can attempt to recover your account.Read to them:“If you see "Google couldn't verify this account belongs to you", you can try again. Google says there's no limit to the number of times you can attempt to recover your account.”source
B.Try again from a device where you normally sign in. Google says verifying another way like this may speed things up.Read to them:“Try again from a device where you normally sign in. Google says verifying another way like this may speed things up.”source
C.Check your spam or junk folder for an email titled "Your Google support inquiry".Read to them:“Check your spam or junk folder for an email titled "Your Google support inquiry".”source
D.If you recently changed your recovery info, Google says it can take up to 7 days to take effect. Try again after a few days.Read to them:“If you recently changed your recovery info, Google says it can take up to 7 days to take effect. Try again after a few days.”source
E.If you still can't get in, Google suggests creating a replacement Google Account. Then move your other accounts to it.Read to them:“If you still can't get in, Google suggests creating a replacement Google Account. Then move your other accounts to it.”source

Then: how long it takes

03How long it takes

Published by the platform

Google says recovery requests can be delayed for a few hours or a number of days, depending on risk factors. The hold gives the real owner time to deny a request they didn't make. Changes to recovery info can take up to 7 days to take effect.

While you wait

Watch your recovery phone and email for Google notices. If a request is not yours, deny it.
Change passwords on other sites that use this Gmail address to sign in or reset passwords.
If your account holds banking details or personal documents, Google suggests telling your bank, and local authorities if needed.
Warn your contacts that emails from your address may not be from you.

04Warn your contacts

Send this from another account or by text, so nobody falls for messages sent in your name.

My Gmail account [address] was hacked on or around [date]. If you got an email from me asking for money, gift cards, a code, or to open a file or link, it was not me. Please delete it and don't reply. I will let you know when the account is safe again.

More templates: email, followers, customers

05Watch out for recovery scams

People who just lost an account are the main target of fake helpers. Only Google Account and Gmail's own app or website can restore your account.

Fake "Google support" phone numbers in search results and ads. Google says you can't call Google for help to sign in to your account. How it works
Calls from "Google Account Security". Google says it never calls you about your account security, and never asks for codes or device approvals by phone. How it works
Paid recovery services and "hackers" who offer to get your account back. Google says it doesn't work with any service that offers account or password support. How it works

All recovery scams and how to spot them

06Once you're back in: lock it down

0 of 9 doneAbout 32 minutes total

Run Security Checkup5 minOpen myaccount.google.com/security-checkup and work through each item it flags.source
Change your password, and every reused one5 minChange your Google password. Then change it on any site that used the same password, or that lets you sign in with your Gmail. Check your passwords shows saved passwords that need fixing.source
Sign out devices you don't know3 minIn your Google Account, open Security & sign-in. In Your devices, select Manage all devices. Sign out of any device you don't recognize.source
Check Recent security activity2 minOpen myaccount.google.com/notifications and look for sign-ins or security changes you did not make.source
Fix your recovery phone and email3 minMake sure the recovery phone number and recovery email are yours and still work. Remove any you don't recognize.source
Create a passkey3 minGo to myaccount.google.com/signinoptions/passkeys and tap Create a passkey. Only do this on a device you own.source
Turn on 2-Step Verification5 minIn your Google Account, open Security & sign-in. Under How you sign in to Google, turn on 2-Step Verification and follow the steps.source
Print backup codes3 minUnder How you sign in to Google, select 2-Step Verification. Under Backup codes, use Get backup codes, then print or download them. Each code works once.source
Remove apps with access3 minOpen myaccount.google.com/linkedapps and remove access for any app you don't use or don't recognize.source

Then do the 24-hour cleanup.

Free toolExposure CheckSee what of yours is already public.Free toolPassword Breach CheckCheck if a password shows up in known leaks.ReadEmail hacked: 7 immediate steps ReadHow do I know if my email was leaked?

07How it probably happened

Most likely
A fake Google sign-in page that captured your password and code
How this scam works
Also common
A password reused from another site that was breached
Less common
An app you gave access to your Google Account
How this scam works

Account taken, recovery details swapped

08Report it

Avoid and report phishing emails (Gmail Help)

Lost money, being blackmailed, or someone is using your account to scam others? Report it to your country's cybercrime service too. If you are in danger, call your local emergency number.

United States

FBI Internet Crime Complaint Center (IC3)Report online crime, including account takeovers that led to money loss or extortion. The IC3 never contacts you first and never asks for money.
FTC ReportFraudReport the scam to the Federal Trade Commission.
IdentityTheft.govUse it if someone used your Social Security number or opened accounts in your name. You get a recovery plan.

United Kingdom

Report Fraud (England, Wales and Northern Ireland)Run by the City of London Police. It replaced Action Fraud on 4 December 2025. In Scotland, call Police Scotland on 101 instead.
Forward scam texts to 7726Free on most UK networks. Your provider can look into the sender and block it.
Report a scam email to the NCSCForward the email to report@phishing.gov.uk before you delete it.
Report Fraud: 0300 123 2040England, Wales and Northern Ireland. In Scotland, call Police Scotland on 101.

India

National Cyber Crime Reporting PortalRun by the Indian Cyber Crime Coordination Centre (I4C), Ministry of Home Affairs. Reports go to state and UT police.
Chakshu on Sanchar SaathiReport suspected fraud calls, SMS or WhatsApp messages to the Department of Telecommunications. It is not for money already lost: call 1930 for that.
National Cyber Crime Helpline: 1930Toll free, 24 hours. Call fast if money left your account: it can help freeze the transfer.

Canada

Canadian Anti-Fraud Centre: report onlineVictims and witnesses can report fraud or cybercrime online. Also contact your local police as soon as you can.
Canadian Anti-Fraud Centre: 1-888-495-8501Toll free. The CAFC does not contact people to ask for money.

Australia

ReportCyberReport cybercrime to police. Your report may go to your state or territory police or the AFP.
ScamwatchReport a scam, even if you lost no money. The AFP also points people worried about identity theft to IDCARE, a free support service.
ReportCyber phone line: 1300 292 371Report concerns about cybercrime or cyber security incidents. If life is at risk, call 000.

09Questions people ask

Can I call Google to get my account back?

No. Google says that for your security, you can't call Google for help to sign in to your account. Use the account recovery page. Anyone who calls you saying they are Google is a scammer.

How many times can I try account recovery?

As many as you need. Google says there's no limit to the number of times you can attempt to recover your account, and wrong guesses won't kick you out.

Why is my recovery request delayed?

Google holds some requests for a few hours or a number of days, depending on risk. The delay gives the real owner time to spot and deny a request they didn't make. Turning on 2-Step Verification can make it longer.

The hacker added a new phone or sign-in method. What happens?

Google says it disables suspicious sign-in methods and alerts your recovery phone and email. You have 30 days from the warning to confirm you added the method yourself.

What if I never get back in?

Google suggests creating a replacement Google Account. Move the sites that used your old Gmail to the new address, and warn your contacts.

Should I use Google's Advanced Protection Program?

Consider it if you face a higher risk of targeted attacks, for example if you work with a political campaign, an activist group, or an IT team. Google says it requires you to sign in with a passkey or security key.

Sources and last check

Last verified: October 16, 2026. Steps checked against the platform's own help pages listed below. Device testing is ongoing; steps marked unconfirmed are still waiting for it.

How to recover your Google Account or Gmail (read 2026-10-16)
Tips to complete account recovery steps (read 2026-10-16)
Why your account recovery request is delayed (read 2026-10-16)
Secure a hacked or compromised Google Account (read 2026-10-16)
See devices with account access (read 2026-10-16)
Google Account Security Scam via Phone Call (read 2026-10-16)
Common questions with Advanced Protection Program (read 2026-10-16)

Wrong step or changed screen? Report it. Never include passwords or codes.