PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteiTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
If you have been robbed, lost a phone, noticed an unfamiliar login, or suspect a SIM swap, treat the event as a wider account takeover—not only a crypto problem. An attacker who controls your phone number may reset email, cloud, financial and exchange accounts. First protect yourself physically, then use a trusted device and connection to contain access in a deliberate order.
If you are in immediate danger, handle safety first
Move to a safe place and contact emergency services or local law enforcement if the robbery is still unfolding or anyone is injured. Do not confront a suspected attacker to recover a phone, hardware wallet or computer.
Once you are safe, avoid making sensitive changes from a stolen phone, a device you do not recognize, or an untrusted public network. Borrow a trusted device, use a known-secure connection, and keep a written record of every action and time. If you must use a shared computer, sign out completely when finished and do not save passwords.
The FBI has described the goal clearly: “The FBI wants to help individuals make themselves harder targets and, if they are victimized, to quickly regain control of their accounts to mitigate any potential harm.” That statement was made by Special Agent in Charge John F. Bennett of the FBI San Francisco Division on March 6, 2019.
#1 Best Overall
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
What to do first after your phone was stolen or a crypto account was hacked
- Secure a trusted device and connection. Do not begin with the potentially compromised phone or laptop.
- Secure the email account that can reset other accounts. Change its password to a new, unique password; end unknown sessions; and inspect recovery addresses, phone numbers, forwarding rules and recently installed applications.
- Call the mobile carrier through an independently verified channel. Report a suspected unauthorized number transfer or SIM replacement and ask for an account PIN and stronger change controls.
- Protect financial accounts. Contact banks, card issuers and payment services if the stolen phone, number or saved payment access could reach them.
- Contain crypto access. Use the exchange’s independently verified website or published support route. Freeze or restrict access if that provider offers the option.
- Preserve evidence before deleting messages or wiping devices. Record transaction details, login alerts, phone numbers, websites and communications.
- Report promptly. U.S. victims can report to the FBI’s Internet Crime Complaint Center (IC3) and local law enforcement, even when no financial loss is confirmed.
Do not assume that changing an exchange password alone is sufficient. A phone-number takeover or email compromise can allow an attacker to reset the password again.
Secure the accounts that can reset your crypto access
Start with email
Email is often an early target in a SIM-swap sequence because it can issue password-reset messages for cloud, social, financial and crypto services. From a trusted device:
- Change the email password to one that has never been used elsewhere. A password manager can generate and store a long random password.
- Review recent sign-ins, active sessions and connected devices. Sign out sessions you cannot identify and investigate unfamiliar locations or times.
- Check recovery email addresses and phone numbers. Remove changes you did not make, then verify that your own recovery methods still work.
- Inspect forwarding rules, filters, delegated access, app passwords and third-party applications. Remove anything unfamiliar.
- Review sent mail, deleted mail and security notifications for password-reset or withdrawal requests.
- Enable an authentication method that does not depend solely on SMS, where the provider supports it.
Do not delete evidence before saving copies. A suspicious reset email, forwarding rule or sign-in alert can help an exchange, carrier or investigator establish the timeline.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Review cloud, password-manager and device accounts
Cloud storage and password-manager accounts may contain identity documents, recovery codes, wallet notes or browser-synchronized passwords. Change their passwords if the same password was exposed, revoke unknown sessions and regenerate recovery codes when the service allows it. Check whether browser synchronization or a backup contains wallet files or seed-phrase photographs; do not upload or forward those secrets while investigating.
Rank #2
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Stolen devices and malware can expose data stored locally or synchronized to the cloud. Device makers provide different procedures for locating, locking or erasing a device. Use the official support instructions from a trusted device, and understand that a remote wipe may not undo data that was already copied.
Secure social and other accounts
Attackers may use a compromised social account to impersonate support staff or send convincing links to contacts. Change reused passwords, remove unknown sessions and check direct messages, profile changes and connected applications. Treat every unsolicited message about your crypto account as potentially fraudulent until verified through an independent route.
What to do after a SIM swap or number takeover
A SIM swap gives an attacker control of calls and text messages sent to your number. That control can be enough to receive password resets and SMS-based multi-factor codes for email, cloud, social, financial and crypto accounts.
Contact the carrier safely
- Find the carrier’s official support number or store location from a bill, card, statement or the carrier’s independently reached website. Do not use a number in an unsolicited text, email or social-media message.
- Tell the carrier that you suspect an unauthorized SIM replacement or number transfer. Ask it to investigate the account history and secure the line.
- Request a carrier account PIN or passcode and ask whether changes can require in-person verification. The FBI has recommended stronger controls, but available features differ by carrier and region.
- Ask when your original SIM was deactivated, what changes were made, and whether the number can be restored. Record the representative’s name, case number and time.
Restoring the number does not by itself restore email or exchange security. Continue through the account-containment steps and replace SMS-only authentication where possible.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Check for related financial exposure
If the phone displayed banking, card, payment or brokerage notifications, contact each institution through an independently verified channel. Ask it to flag suspected account takeover, review recent transfers and secure telephone-based changes. A carrier investigation and a financial-institution investigation address different parts of the incident; do both when applicable.
How to contact a crypto exchange without falling for a fake support agent
Scammers frequently impersonate exchange support after a theft or public complaint. They may claim that your account is frozen, ask you to “verify” a seed phrase, or direct you to a look-alike login page.
- Type the exchange’s known official web address yourself, use a bookmark you created previously, or use a phone number published in the provider’s official help center. Do not follow a link or call a number supplied by an unsolicited contact.
- Open a support case from inside the account if you can still sign in. If you cannot, use the provider’s official account-recovery page reached independently.
- State that you suspect unauthorized access, a SIM swap, device theft or an unauthorized withdrawal. Include the approximate time and ask what temporary restrictions are available.
- Verify the support case through the same official channel. Never give a caller or message sender your password, one-time code, recovery code, private key or seed phrase.
Real support procedures differ. Some providers may lock withdrawals, require identity verification or ask for a police report; others may have different steps. Follow only instructions displayed in the provider’s independently verified support system.
Preserve evidence before it disappears
Create an incident folder on a trusted device and keep an untouched copy of original messages. Record facts in UTC or include your time zone so the sequence is clear.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
- Wallet addresses that sent or received funds.
- Asset type and exact amount.
- Date and time of each transaction.
- Transaction hash or blockchain explorer identifier.
- Name of the exchange, wallet application, bank or payment service involved.
- Login alerts, password-reset notices, carrier messages and screenshots.
- Websites, phone numbers, email addresses, social usernames and other identifiers used by the suspected scammer.
- Device model, phone number, carrier case number and the time service stopped or returned.
Do not edit screenshots or crop out timestamps, addresses or message headers. Save the original export when a service offers one. If a transaction is still pending, tell the exchange immediately; once a transfer is confirmed on a blockchain, authorities and providers generally cannot reverse it.
Report suspected cryptocurrency fraud promptly
U.S. reporting routes
The FBI directs victims in the United States to report suspected internet crime to IC3 and to contact local law enforcement. The FBI encourages reporting even when no financial loss occurred, because reports can connect related incidents and identifiers. Include the evidence listed above and explain whether the event involved robbery, SIM swap, account takeover, phishing or an unauthorized transfer.
Reporting does not guarantee that funds will be recovered, and it does not reverse an on-chain transaction. It creates an official record that may help an exchange, carrier or investigator coordinate a response.
Recommended Free Tools
Report the physical robbery separately
A stolen phone, wallet, identification document or computer may require a local police report for insurance, carrier or account-recovery procedures. Keep the report number with your incident records and provide it only through independently verified channels.
Best Value
- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Universal Connectivity (USB-A ): Features a built-in USB-A connector—simply unfold the key and plug it into your compatible PC or laptop for seamless authentication on the go.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- Ultra-Durable & Portable: Featuring a rotating metal cover, this key is water, crush, and tamper-resistant. It fits easily on a keychain and requires no batteries or network connectivity.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID, and NFC is NOT supported.
Be skeptical of crypto-recovery offers
After a theft, victims may receive messages promising to trace or retrieve funds for an upfront fee. The FBI and IC3 warn that recovery services and claims that someone can recover lost cryptocurrency may be a second scam.
- Do not pay an unsolicited recovery agent, “blockchain investigator” or supposed government contractor.
- Never share a seed phrase, private key, password, one-time code or recovery code.
- Do not install remote-control software at a stranger’s request.
- Do not send a “verification deposit” to unlock a refund or recovered balance.
- Verify every person and organization through contact information you find independently.
A legitimate exchange or investigator will not need your seed phrase to inspect a public transaction. Keep communicating through the official case channel you opened, not through a new account that contacted you first.
After containment: harden accounts for the future
Choose authentication that does not rely on the phone number
Where supported, the FBI favors a standalone authentication application or a physical security key over SMS-only multi-factor authentication. A security key using the FIDO2 standard can resist many phishing and SIM-swap attacks, but each provider must support security keys and the user must keep a backup safely.
| Method | Dependence on a phone number | Recovery consideration | What to check |
|---|---|---|---|
| SMS code | High; the code follows control of the number | Carrier recovery is essential | Whether the provider offers a stronger alternative |
| Standalone authentication app | Lower after initial setup; codes are generated on the device | Save the provider’s recovery codes and maintain a secure backup | How the provider supports device loss |
| FIDO2 security key | Not tied to SMS | Keep a second registered key or the provider’s approved recovery method | Whether the exchange, email and other critical providers support keys |
Do not wait for an emergency to discover that a provider does not support your chosen method. Register backup methods while the account is secure, store recovery codes offline, and test account recovery without exposing the codes to anyone else.
Separate critical accounts
Use unique passwords for email, the exchange, cloud storage, the password manager and financial services. Keep a dedicated email address for financial and crypto accounts if that arrangement is practical, and avoid publishing it publicly. Review account activity and connected applications periodically rather than only after an incident.
Protect self-custody wallets carefully
Self-custody recovery depends on the wallet provider’s documented procedures. Do not assume that changing an exchange password protects a self-custody wallet, and do not assume that deleting an application destroys or restores its keys. If a seed phrase or private key may have been seen, copied or stored on the stolen device, stop using it for new funds and consult the wallet’s official support documentation from a trusted device about migration. The exact steps, fees and timing vary by wallet; never move funds by following instructions from an unsolicited helper.
A physical security key can strengthen compatible online accounts, but it cannot reverse a blockchain transfer, recover a lost seed phrase or restore assets already controlled by an attacker.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Quick Recap
Common mistakes that make a compromise worse
- Using the stolen phone to change passwords: an attacker may still control the session, number or malware on that device.
- Changing only the crypto password: a compromised email or phone number may immediately reset it.
- Calling a number from a warning message: the message may be a phishing attempt impersonating support.
- Sharing one-time codes: support staff should not need a code that proves control of your account.
- Deleting messages: lost evidence can make carrier, exchange and law-enforcement investigations harder.
- Assuming a confirmed transfer can be reversed: blockchain settlement is generally irreversible.
- Paying for guaranteed recovery: promises of certain retrieval are a warning sign, not proof of expertise.
- Registering only one authentication device: losing that device can create a second lockout.
A practical decision checklist
- If there is physical danger, leave and contact emergency services.
- If the phone or laptop is missing, use a trusted device and connection.
- If the number stopped working unexpectedly, contact the carrier and request stronger account controls.
- If email may be exposed, secure it before resetting other accounts.
- If an exchange account shows suspicious activity, use only independently verified support.
- If funds moved, save hashes, addresses, amounts, assets and timestamps immediately.
- If someone offers recovery, stop communicating and verify the offer independently.
- If you are in the United States, report to IC3 and local law enforcement, even if loss is not yet confirmed.
- After containment, replace SMS-only authentication where possible and store backup recovery methods securely.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
