Had an email from Microsoft

[nameeCha]

Just got an email on my phone saying my account is locked on my phone. I obviously didn’t click any links as I know that’s how scams work so I opened a new browser on my laptop and tried to sign into my outlook account. It said I’ve been locked out due to too many unsuccessful attempts. I was able to reset my password thank God. I’m actually shocked as I went into activity log for the first time and since last month there have been at least 100 times someone has been trying to get into my account as lots of unsuccessful attempts. The location shows practically every country - Egypt, Russia, USA, Indonesia, Peru etc. every single one is a different IP address and different country (I think IP address probably being hidden so msybe all from one country but making it look like different locations maybe?) . I feel really upset looking at this as they could have gotten into everything. Even my bank account is linked to my email. Don’t know what I’m looking for maybe some advice how not to easily let access into my accounts. It’s really frightening.

Yeah it's really horrible when it happens. I'd change your passwords.

@xyz111 thank you. I’ve changed my email password and my Apple ID password. What else do you suggest should I change too? I feel so overwhelmed.

Not a change as such but I use my banking app to freeze my cards when not in use as I've had money taken from my accounts a few times

Are you using 2 factor authentication everywhere?

If not, that's your next step.

Yes 2 factor authentication is key. That's when you need a text code or number from an app to be able to log in. Set this up on everything possible including your email.

Make sure your back up email and numbers are still things you can access too . Same for social media accounts as well.

@theemmadilemma yes I’m using it as far as I know but second guessing myself and wondering if I’ve forgotten it somewhere

Change your passwords, and set up 2 factor authentication on anything important (So that it needs a code from your phone as well as your password)

You're always going to have people trying to access and email account, all they need is your email address. But as long as you have secure authentication they won't be able to actually get in.