What to do if your account is hacked: Ministry of AI explains

Tengrinews.kz — Cyber hygiene is essential for protecting personal data online. It includes practices like using strong passwords. But what should you do if you notice that your account — or that of someone you know — has been hacked? The Ministry of Artificial Intelligence and Digital Development provided detailed instructions.
What to do if your account is hacked
If you notice suspicious logins, password changes, or messages being sent from your account, immediately change your password and enable multi-factor (two-factor) authentication, the ministry advised.

“If you no longer have access to the account, use the recovery form on the official website of the service. Then report the hack to the platform’s administration. All social networks, banks, and messengers have special channels for such cases. If the hack involves a banking app or financial operations, contact your bank immediately to block your cards and access,” the ministry said.

If you see that someone else’s account has been hacked, do not click on links or respond to suspicious messages.

“Warn the person and report the compromised page through the platform so it can be temporarily blocked. The main rule is: don’t delay. The faster you act, the greater the chance to recover access and protect your data,” the ministry emphasized.


Photo:depositphotos.com
How to minimize the damage
The Ministry of Artificial Intelligence also shared steps to reduce the consequences of a hack:

Block the hacker’s access: change all passwords and end active login sessions.
Remove unknown devices (for example, in Telegram: Settings → Privacy → Devices).
Inform your contacts not to open links sent from your account.
Take screenshots and record evidence — this will help when filing a police report.
Block your bank cards and check your statements; file a fraud report if necessary.
If someone calls claiming to be from a bank, hang up and call back using the bank’s official number.
Never share SMS confirmation codes or CVV/CVC codes from the back of your card.
If your email was compromised, restore access via a backup address or phone and check that forwarding settings weren’t changed.

Where to report
If your account is being used for fraud, report it to the platform through the “Report” function or feedback form.

“In case of financial losses, file a police report for fraud. If there is evidence of illegal collection or processing of personal data, citizens may contact the Information Security Committee of the Ministry to take appropriate action,” the statement said.

The ministry also reminded that violating personal data protection laws is punishable under Article 79 of the Administrative Code and Article 147 of the Criminal Code of Kazakhstan.
Simple tips to protect your accounts
The Ministry recommends following basic digital hygiene rules:

Avoid posting excessive personal information.
Use unique passwords of at least 12 characters with numbers and symbols.
Always enable two-factor authentication for social media, messengers, and online banking.
Don’t click on suspicious links — even from friends.
Avoid installing remote-access apps.
Check website addresses carefully — scammers often change just one letter.
Through the eGov portal or EgovMobile app, you can enable a voluntary ban on receiving online loans.