Yesterday I noticed I can't log into Sberbank, it says invalid code. Called support - they told me that password change requests came from my number for Yandex and Gosuslugi. How can I figure out what other services they might have gotten into?
Urgently check all your main accounts - email, social media, cloud storage, online banking, contact the support team of each service, let them know your number has been compromised, and ask for login history and authorization attempts. At the same time, change your passwords everywhere you can from a different device and number, then contact your telecom operator - ask them to block your SIM card and reissue your number to a new one, that's the most reliable solution. In 2026, this scheme with intercepting codes happens pretty often, where scammers get a new SIM in someone else's name or bribe salon employees - don't delay, act fast.
The login history idea is spot on 👍 I'd also add: go into your Google and Yandex settings (in the security section), you can see all your devices and login locations there - if you spot anything weird, kick out those sessions right away. And if you can, temporarily disable two-factor authentication via email (if it's available), then you can turn it back on with a new number or through an authenticator app like Google Authenticator.
Guys, I'll add one more important thing :) Right after changing your passwords, definitely check your login history and active sessions - usually there's an option for this in your account settings. On Yandex, Google, social media - check everywhere to see what devices and IP addresses were used to log in. If you spot any suspicious logins, terminate all active sessions. And yeah, if any services have payment methods linked or documents stored there - that's critical stuff, hackers go after that first.
Here's another tip from personal experience - call your bank not just the support line, but actually visit a branch. Better to check in person that everything's okay with your account, lift any blocks if needed, and reconfirm your number. Sometimes there are inaccuracies over the phone :) Ask the bank for a statement of all transactions from the last few days, maybe something got through there.
And most importantly - change your number or reconfirm it from your own device on all the services you use. Two-factor auth - it's protection, but only if the number is actually under your control. Switch to a new number if you can, and you can ask your carrier to close the old one or freeze it so the attacker can't do anything with it.
Log into answer.
