If Someone Hacks Your Streaming Account, Do This

A stranger watching your queue is annoying. A stranger with your stored card and the email tied to your account is a real problem. Here is the order of operations, from logging them out to disputing charges.

Finding a stranger’s profile on your streaming account, or a show in your watch history that nobody in the house pressed play on, is how most households discover the account was taken over. It may look like a low-stakes problem, but streaming accounts often hold a stored card, your email address and viewing habits worth protecting, and criminals treat them as entry points into email and banking accounts. Kasada’s 2025 Account Takeover Attack Trends Report counted 6.2 million customer accounts broken into across the brands it studied, with entertainment among the heavily targeted sectors. What you do in the first hour matters more than how it happened, so here is the order to work through.

Signs Someone Else Is Using Your Account

Confirm the problem before you start changing things, and rule out the boring explanation first: ask everyone who legitimately uses the account whether they watched the show or made the profile. Once that is settled, look for these signs, drawn from Federal Trade Commission guidance on hacked accounts and from the services themselves:

• Shows or movies you never watched appearing in continue watching or recently watched lists
• New profiles on the account that nobody in your household created
• A notification, or an entry in a device list, showing a login from a device you do not recognize or a location you are not at
• Changes you did not make, such as a plan upgrade, a new payment method or a different email address on the account
• Being unable to log in because the password or email was changed
• Charges on your card or statement that you did not authorize, including rentals or gift card purchases made through the account

Any one of these alone may have an innocent explanation. Two or more together usually mean someone else has your login.

Start Here: Change the Password and Sign Out Everywhere

If you can still log in, do two things in this order. First, the FTC advises making sure the security software on your computer is up to date and running a scan as the opening step of taking an account back. Infostealer malware can grab passwords saved in your browser, so if the scan finds suspicious software, delete it and restart the computer before you touch the account at all.

Second, log in on the service’s website rather than the app, since account settings are usually fuller there. Change the password to one you do not use anywhere else, and pick the setting that logs out every device on the account. Most services put this option in the password change flow, and it does exactly what it sounds like: anyone logged in on another device gets kicked out and has to sign in again, which they cannot do with the old password.

Do not reuse the password you just replaced. Netflix specifically recommends using a password for its service that you do not use anywhere else, and the same logic applies to every other streaming account in the house.

Check Profiles, Devices and Account Details

Now go through the account the way an intruder would have. Every major service has a page listing devices currently signed in and recent activity, though the name varies. On Netflix it is Manage Access and Devices; on Disney+ you can log out of all devices from Account; on Hulu there is a Manage Devices page; Spotify offers a Sign Out Everywhere option; and HBO Max lists devices under Settings. Remove anything you do not recognize, and delete unfamiliar profiles along with any watch lists or settings they added.

Then check the details that matter financially. Look at the plan level, since plan upgrades you did not make are a documented sign of takeover. Check the email address and phone number on the account, and any recovery email or phone number listed, to confirm they are ones you entered and can access. Review the payment methods on file and remove anything you did not add. Scan recent charges made through the service itself, including rentals and gift card purchases.

When You Are Locked Out: Recovery Paths

If the stranger changed the email or password and you cannot get in, skip the steps above and go straight to the service’s customer support. Most major services offer a help site with chat or phone support, and some publish a phone number for account issues.

Support teams verify identity with the evidence you can offer, so gather these before you contact them:

• The email address you used when the account was first created
• The last four digits of the card on file
• The approximate account creation date, which you can often find in the original welcome email

While you wait for the service to respond, work on the next section, because the linked email account is where this fight is usually won or lost.

Check the Email Linked to the Account

The FTC puts it plainly: your email account is a key part of protecting everything else, because password reset links get sent there. A stranger who controls your email can reset passwords at banks, stores and other services, and can intercept the alerts that would warn you. If your streaming password was the same as your email password, treat the email account as compromised too.

Once you have regained access to the email account, the FTC recommends three specific checks. Look in the email settings for forwarding rules that send your messages to another address, and delete any you did not create. Check the sent folder for messages the intruder sent from your account. And look in the deleted folder for messages that were read and then removed, which can show you what the intruder was interested in.

If the streaming account is recovered but the linked email was changed without your knowledge, change that back first. Recovery of everything else flows through the inbox.

Charges You Do Not Recognize and How to Dispute Them

Go through the statement for the card tied to the account and look for charges you did not make, both from the streaming service itself and from unfamiliar services, since attackers test a working email and password combination on other sites. The FTC’s guidance on spotting trouble applies here: act quickly.

For charges on your card, your bank or card issuer is the party that can block the card or dispute the charges, so contact it directly rather than relying only on the streaming service to fix it. If you believe someone is using your personal information, the FTC runs IdentityTheft.gov, where you can report it and get a personalized recovery plan. Keep notes on what you find and whom you contact, since disputes go more smoothly with a dated record.

Turn On Extra Sign-In Protections

A strong password is the baseline, but the FTC notes that even strong passwords are vulnerable to attack, and that two-factor authentication adds a layer a stolen password cannot get past. With it on, logging in requires your password plus something else: a PIN, a one-time verification code sent by text or email, or a code from an authenticator app. The most common type is a passcode, typically six digits or longer, that expires automatically. Not every streaming service offers two-factor authentication, but turn it on everywhere it is available, and put it on your email account first.

Two smaller settings are worth a minute. If the service asks security questions, pick answers only you would know, and avoid anything findable online or in public records, like a birthplace or mother’s maiden name, since attackers guess at those. And consider a password manager to generate and store unique passwords for each service; our guide to what to check before you install a password manager covers the questions worth asking first.

What Service Terms Say About Account Security

Every streaming service publishes terms that cover how accounts and credentials may be used, and those rules differ from service to service. That is worth skimming before a crisis rather than during one, because the terms and the help pages are where a service spells out what account recovery options, device lists and sign-out controls it actually offers. What counts as permitted sharing is likewise something each service defines for itself, so check the terms for the one you use rather than assuming another service’s rules carry over. If your household exchanges logins with relatives, our guide to safe ways to share passwords with family covers how to pass along credentials without sending them through insecure channels.

After the account is secured, close the loop on prevention. Use a different password for every streaming service, turn on two-factor authentication where it exists, and keep the software on the devices you stream with updated, since updates patch the holes attackers exploit. Watching your statements alongside your renewal dates helps too; our guide to tracking subscription renewal dates offers a simple system, and if the incident has you wondering whether you are carrying more subscriptions than you use, our streaming subscription audit walks through how to find out.

Reader questions

How did someone get into my streaming account in the first place?

The most common routes are credential stuffing, where attackers test passwords leaked in other breaches against streaming sites, phishing messages that trick you into entering your login, and malware that grabs passwords saved in your browser. Reusing a password across sites makes all three easier.

Should I delete the whole account if it was hacked?

Not necessarily. Most households can regain control by changing the password, signing out all devices and locking down the linked email. If the service cannot verify you or you no longer trust it, canceling and starting fresh is a reasonable option, but secure the linked email and payment methods either way.

Will my streaming service refund charges a hacker made?

Streaming services handle these cases individually and policies vary, so there is no guaranteed outcome. For charges on your card, your bank or card issuer is the party that can actually block or dispute them, which is why contacting them quickly matters.

Is it safe to keep sharing my account with family?

Each service sets its own rules for who may use an account, so check the terms for the one you use. The bigger risks come from sharing passwords through insecure channels and reusing the same password elsewhere, not from sharing itself.

We describe how services generally work; features, settings and terms change often, and they differ between companies. This is general information, not legal advice. Check the provider’s current policies and official sources such as FTC.gov.