Act calmly, but act now
If you suspect that someone other than you has accessed your Cosmos account, the most important thing is to act quickly. Do not panic, but do not put it off either. The earlier you respond, the less damage anything can do, and very often the suspicion turns out to be a false alarm.
What to do, in order
Change your password. Choose a new, strong password you have not used anywhere else.
Sign out of all sessions. If the platform offers a sign-out-everywhere option, use it. This kicks any other device or browser out of your account immediately.
Turn on two-factor authentication if you have not already. This stops anyone reusing a stolen password.
Tell the team. Message us through the chat or email the team directly, and include what made you suspect a compromise. We will check what we can on our side, including recent activity.
Check the basics. Make sure your registered email is still yours and unchanged, and look for any unexpected changes to your contact details, ownership records or recent activity. If anything has changed without your knowledge, tell us.
What Cosmos will do
Once you tell us, we will help you investigate, lock things down if necessary, and decide what to escalate. Where the incident involves your personal data, the privacy team will get involved and you will be kept informed. We treat this kind of report seriously, and we would always rather check than dismiss.
How to reduce the risk for next time
If your account was accessed because a password was reused from a site that was breached, a password manager and a fresh, unique password are the answer. If the way in was a phishing email, the lesson is to be even quicker to suspect surprise messages. See Recognising real emails and messages from Cosmos and Keeping your account secure.