Account lockouts create urgency. Scammers know that. They look for people who are frustrated, tired, and ready to believe someone can fix the problem faster than the official provider path.
Watch for guaranteed-access claims
No independent third party can guarantee that Google, Microsoft, Yahoo, Apple, or another provider will restore an account. Providers control their own recovery systems.
- Be cautious with phrases like "100% guaranteed recovery" or "instant unlock."
- Avoid anyone who says they have a special provider connection but cannot prove it through official channels.
- Do not pay someone who promises a result before reviewing safe official options.
Never share verification codes
A verification code is a key. If someone asks you to read it over the phone, paste it into chat, or send a screenshot, stop.
- Do not share one-time passcodes.
- Do not share backup codes.
- Do not share password reset links.
- Do not share authenticator-app codes.
Simple script: "I do not share passwords or verification codes. I will use the provider's official recovery page."
Be careful with fake support numbers
Search results, forum comments, and social posts may show phone numbers that look like provider support. Many are not official. Confirm support paths directly on the provider's own domain.
Avoid remote-access pressure
If a stranger wants remote access to your computer or phone during an account recovery emergency, treat it as a serious warning sign. Remote access can expose private files, browser sessions, and saved passwords.
Do not send identity documents casually
Some official recovery flows may ask for documentation in limited cases. That does not mean you should send identity documents to a random helper, marketplace seller, or social-media account.
Use planning notes instead of panic
Planning is slower than a scammer's promise. That is the point. Write down what happened, what you still control, which devices are trusted, and which official provider resource you will use next.
What to document after suspicious contact
- Date and time.
- Name, handle, phone number, email address, or website used.
- What they asked for.
- Whether money, codes, documents, or remote access were requested.
- Any screenshots that may help you report the contact.
Next step: if an account is actively compromised, go directly to the official provider security resources. If you are preparing for a recovery attempt, use a tracker and keep sensitive secrets out of shared worksheets.