Understanding unauthorised account access

There are many ways someone can gain access to an account without permission. The most common methods involve emotional manipulation—like pressuring us to share passwords or pretending to act in our best interest. Other less common methods are technical, like hacking or installing spyware.

Having an account accessed without consent can feel like a loss of control—but unfortunately, it’s also incredibly common. Even if it feels personal or targeted, many tactics are widespread and used against countless people. There is no shame in being caught off guard by someone else’s intrusion. Here are some of the ways it can take place.

What it can mean for us: Identifying unauthorised account access

Unauthorised access doesn’t always start with hacking. Sometimes it’s a password shared in trust, that’s later used to control or monitor. Sometimes it’s someone staying logged in on a shared device, guessing a password, or resetting one without our knowledge. And sometimes, it’s not clear how it’s happening—just that someone keeps showing up in places they shouldn’t.

It’s normal to feel unsure, especially when the access comes from someone close. And it’s normal to feel upset, confused, angry, or anxious, even if we don’t have proof. If something doesn’t feel quite right, that’s reason enough to start looking into it.

Red flags to look out for

• Seeing messages marked ‘read’ that we didn’t open.
• Passwords or settings changing without our knowledge.
• Strange login alerts or security warnings we don’t recognise.
• Someone bringing up conversations, photos, or posts we haven’t shared with them.
• Being locked out of our own accounts—or finding that someone else seems to have control.
• Unexpected changes to saved photos, documents, or account recovery information.

How we might feel

• Like our privacy has been stolen, or our identity isn’t fully our own.
• Constantly watching what we write or save, in case someone else sees it.
• Afraid to log in from shared devices or public Wi-Fi.
• Ashamed, even though we didn’t do anything wrong.
• Confused about whether it’s really happening—or if we’re overreacting.
• Powerless to stop someone who always seems one step ahead.

Questions we can ask ourselves

• Did I give someone access in the past that I no longer feel comfortable with?
• Has anything changed in my account or device settings without my input?
• Do I feel anxious when I open certain apps or messages?
• Is someone using what they know about me—emotionally or digitally—to control, shame, or isolate me?
• Even if I can’t explain how, do I feel like someone is watching what I do online?

‍

We don’t need to have everything figured out to take action. Even small changes can help rebuild privacy and control. And no matter who accessed our account, or how—it’s not our fault.

The impact of AI

AI is changing the way accounts are accessed and abused. In the past, someone might have needed passwords or direct access to a device. Now, AI tools can help people guess login details, impersonate others, or even bypass security checks—sometimes without needing much technical skill at all.

AI can make these tactics feel more advanced—and the pace of change can be overwhelming. It’s natural to feel confused or unsure how to keep up. We’ve listed out some of the ways AI is making unauthorised access easier, but remember: while the tools may be new, the behaviours are often familiar. At their core, these tactics are still about control, surveillance, and broken trust. 

And just like before, survivors deserve support, autonomy, and digital safety—no matter how the technology evolves. 

Remember, AI is evolving quickly

The clues that once helped us spot AI-generated content aren’t always reliable any more. Things like extra fingers in photos or blurry edges around objects were once common signs, but new tools are improving fast. 

Instead of relying on those glitches, it’s more helpful to look at the bigger picture. These are some helpful questions to ask:

• Does the image or audio feel believable? 
• Who originally shared it, and where did it come from? 
• Can you double-check it through another reputable source or tool? 

Trusting your instincts, asking questions, and slowing down can all help make sense of what you’re seeing or hearing.

You’re not alone if you’re thinking…

Discovering that someone has accessed a personal account without permission can feel violating, disorienting, or frightening. Some people describe a deep sense of exposure—like their private thoughts or identity were no longer theirs. Others feel anxious, betrayed, or unsure who to trust. 

We all respond in different ways, and that’s okay. Here are some reflections and questions survivors often share.

Things we can do

No one can fully control whether someone tries to access their accounts—but small steps can help limit opportunities for intrusion, make accounts harder to compromise, and support a greater sense of digital control.

Taking these steps can be exhausting—both emotionally and practically. It’s okay to move at your own pace and choose only the steps that feel manageable right now. No one should have to manage this alone. Support is available, and you deserve safety, privacy, and peace of mind.

Set clear boundaries

It’s okay to say no to sharing accounts, passwords, or devices—even with someone you trust. Questions like “Who will be able to see this?”, “What happens if we stop sharing this account?”, or “Can I remove access later?” can help clarify expectations. If someone pressures, guilts, or threatens you into giving access—that’s not about trust. That’s a form of control.

Further steps and support

Finding out that someone has accessed a personal account without consent can be upsetting, confusing, and difficult to trace. Whether the access happened recently or over time, support is available—and there are steps that can help us regain control.

Document the abuse

• Take screenshots of login alerts, password reset requests, or unexpected changes to account settings.
• Keep a written record of anything unusual—like messages that were read without you opening them, changed content, or times you were locked out of your own accounts.
• If you suspect someone is accessing your account from a shared device or old login, note what apps or settings may still be connected.
• Safety Net Project (by US-based National Network to End Domestic Violence) can provide helpful guidance on how to document online abuse.

Getting support

• Operation Safe Escape (a US-based nonprofit that works with survivors of domestic violence, stalking, and harassment) can help identify risks, remove spyware, and create a plan for safer communication.
• Domestic abuse and stalking services understand the emotional and digital impact of account access. They can help survivors navigate next steps with trauma-informed care.
• Friends, family, or advocates can offer emotional support, help change settings, or simply stay nearby during a stressful process.

What we’ve covered in this section

This section explores someone accessing your accounts without your permission. This might happen through password sharing, guesswork, spyware, or emotional manipulation. It explains how account intrusion can feel like a loss of control, even when there’s no evidence we can see. It also includes practical prevention strategies, documentation tips, and ways to reset access and rebuild digital boundaries.

Remember…

Taking back control over digital accounts can feel intimidating—no one should have to do it alone. If the situation feels unclear or overwhelming right now, then this guide, and the support options listed on the previous page are here to return to at any time.