Digital security
A compromised exchange account: the response checklist
Treat account containment and tracing as separate workstreams.
By Block Claim Group Editorial Team · Published 4 October 2026
AI-generated conceptual artwork; not a real case, client, employee or investigation.
The short answer
If someone has accessed your exchange account, contact the exchange immediately through an official channel and request its account-security response. Record suspicious login alerts, withdrawal notices and changes to email, phone or authentication settings. If your email account is also affected, it may be part of the same compromise.
What to check and preserve
From a device you trust, follow the provider's process to secure access and review available sessions and permissions. Change reused passwords across affected services and enable supported multi-factor authentication. Keep support references and a timeline of what the provider confirmed rather than relying only on screenshots.
Limits and important distinctions
A locked account may stop further activity but does not mean a past withdrawal has been returned. Ask which withdrawals were actually completed, which network they used, and whether the provider has taken any action. Do not send a password or verification code to a caller claiming to be the security team.
Checklist
- Use the exchange's official emergency security channel.
- Preserve login and withdrawal notifications.
- Secure the linked email and reused credentials.
- Request written confirmation of completed withdrawals.
This article is general educational information, not legal, financial or tax advice. Every situation differs, and no outcome, including recovery of funds, can be guaranteed. Consider speaking with a qualified professional and your local authorities.
AI-assisted educational content based on the linked official sources. It is not individual legal, financial or tax advice. Rules and provider procedures may change.
Written by the Block Claim Group Editorial Team under our editorial policy.
