Hacked and Compromised Email Account: What Should I Do?

[+ Axiom2001]

Since November 2025, I've had difficulty with my email account.  I changed my banking information and requested not receiving any emails from my financial institution.  

...had a wonderful I T come to my house to restore my original FB account, to reclaim my PWs, etc.  His expert work only lasted for about a month, for that friggin' hacker has been   at it again.

I rang my I T yesterday, and he will make an appointment later today or for another time.  

When he arrives, I'll, ask him if I should I create a new email account name and password, for about thirty minutes ago I received a brief notice on my screen requesting that I put in my password in order to access emails that are financially related.  

(I have already resorted to receiving my bills via mail as well as paying a few of them in person.  But I am afraid that both methods will be completely discontinued within a few years, for everything will be operated via cell phones and computers (technologically).)

To you in the know, I'd appreciate your advice prior to my I T's arrival.

[RadioRob]

Ultimately the question becomes how is the attacker gaining access to the account in the first place. If you change email addresses for example and your phone is compromised… the attacker will simply follow the chain and access the new account. 

For that email account, what are the various ways you access it?  Are each of those ways secure?  (No malware on your computer/phone etc)  Do you have a way to enable more secure ways of accessing email such as two factor authentication or client certificates?  That way even if they have your password they would need access to a trusted device to access the account.

[+ Axiom2001]

On 4/9/2026 at 2:01 PM, RadioRob said:

Ultimately the question becomes how is the attacker gaining access to the account in the first place. If you change email addresses for example and your phone is compromised… the attacker will simply follow the chain and access the new account. 

For that email account, what are the various ways you access it?  Are each of those ways secure?  (No malware on your computer/phone etc)  Do you have a way to enable more secure ways of accessing email such as two factor authentication or client certificates?  That way even if they have your password they would need access to a trusted device to access the account.

I truly thank you for addressing my concern, and in response to your initial question--  the only manner in which I gain access to my gmail account is via my computer; I don't use my phone to email or text.  

Last Thursday or Friday, when my  I T was scheduled to see me in conjunction with the problem, instead of his coming to my residence, he worked from afar via his phone, something  that surprised me, for he had my cell phone number that we used for back-up when he came to fix the problem a few weeks back.  He also had my password that I'd given to him when he sat in my study doing the work a few weeks back.  

(When I was at the Apple Store in December, the main man who worked with me and my problem, did NOT ask for my PW; he had me type it in, and from there he proceeded to fix what ailed my computer.  One thing that he did was have me use the same PW for both my gmail and yahoo accounts.  My new man did not, and right now I don't have a back up which has been problematic, for when doing business now, many companies request something else for verification to find out if it is really I who's making charges, etc.)

A very good friend of mine  recommended this new I T to me, so I trusted his recommendation.  Right now I am dubious, but when David's due back within in few days--I will address this problem again and hope that he'll address this situation honestly.