Report a compromised account

Which device should I use?

Use one you trust. If malware or remote access is possible, disconnect that device and switch to another. Do not message the attacker through your account, keep retrying logins until you are locked out, or delete anything before you have written it down.

What do I do right now?

1. Secure the email account linked to Tapmy: change its password, check recovery options, turn on multi-factor authentication if available, and sign out unknown sessions.
2. Reset your Tapmy password from a trusted device using the official account recovery flow.
3. Turn on any extra Tapmy sign-in protection you have access to.
4. Review sessions, devices, team access, and connected services. Remove anything unfamiliar.
5. Look at your public site for changes: links, offers, prices, domain, contact details, AI features, and published content.
6. Check customer access and messages for actions you did not take.
7. Sign in to Stripe on its own and look for payout, bank, or payment changes.
8. Secure your domain registrar, DNS, social, calendar, and file accounts.
9. Contact support and keep the case reference.

If you cannot sign in, do not create a new account to take over your site unless support asks. A second account can muddy ownership and evidence.

What evidence should I keep?

Note when you first noticed the problem, the last time you know access was safe, your time zone, the affected site, unfamiliar sessions or edits, suspicious messages, and what you have already done. Take screenshots with passwords, codes, customer data, balances, bank details, tokens, and private URLs removed.

List customer impact on its own: a changed checkout, missing access, messages you did not send, altered products, or exposed information. Do not export more customer data just to investigate.

How do I contact people safely?

Open the official Tapmy support page yourself. Do not reply to the suspicious email or click its support link. Tell affected customers only after you know the facts. Avoid guessing in public about what data was exposed.

For payment concerns, contact Stripe through your Stripe account as well. Tapmy Support never needs your password, one-time code, full card number, or recovery code.

How will I know the account is safe again?

• Email, Tapmy, Stripe, and connected accounts are secured from a trusted device.
• Unknown access and unauthorized public changes are found.
• Evidence and customer impact are written down safely.
• One support case holds the timeline.
• No credentials or customer data went to an unverified party.

What if my changes do not stick?

If a password change does not persist, stop and escalate through another trusted channel. If you lost your email, use that provider's recovery process. If you face immediate financial or personal danger, also contact your bank or local authorities.

Tapmy cannot promise to recover every account damaged through an outside compromise, and no response time is guaranteed.

Where do I report it?

Open Contact Tapmy Support on your own and write account compromise in the subject or first line. After things are contained, read Protect your Tapmy account and Recognize phishing and fake Tapmy messages.