Skip to main content
Hacked email response

Business email hacked, or clients getting fake invoices from you? We'll lock it down and help you recover.

  • Clients say they received strange
  • Emails appear in Sent that
  • You can't sign in
  • Rules forward or delete your

When an email account is taken over, attackers can read your mail, send fake invoices to your clients and change rules so you don't notice. During business hours, we lock the account down, remove the attacker's access, find out what was changed and help you put things right.

  • Same-day or next-day, where available
  • Onsite across Perth, or remote
  • No lock-in contract
  • Business and home IT

We respond during business hours: Monday to Friday, 8am to 4pm.

Outside those hours, do these things first:

  • If a payment may have gone to the wrong account, call your bank straight away.
  • If you can, change the email password from a different device.
  • Report it at cyber.gov.au.

Then book us for the next business day.

Common problems

Has someone else got into your email?

  • Clients say they received strange emails or invoices from you
  • Emails appear in Sent that you didn't send
  • You can't sign in, or the password was changed
  • Rules forward or delete your email without you knowing
  • A supplier's bank details changed by email just before a payment

Want to stop this happening in the first place? See Multi-factor authentication rollout.

How we fix it

How we respond to a hacked email account

  1. Lock the account down

    New password, all sessions signed out, and the attacker's access removed.

  2. Check what changed

    Forwarding rules, connected apps, sent emails and recovery details.

  3. Find out what was sent

    Who received emails from the account while it was compromised.

  4. Help you tell the right people

    Clients, suppliers and your bank, where needed, with plain wording you can use.

  5. Close the gap

    MFA switched on and other accounts checked, so it's much harder to happen again.

  6. Write it up

    A plain-English summary of what happened and what was done.

How it works

From crisis to recovered, in three steps

  1. Book online or call

    Tell us what's happening and how many people are affected.

  2. We connect or come to you

    Many problems can be resolved through a remote session you approve. We come onsite when the job needs it.

  3. We resolve and test

    We work through the cause and check the result with the people affected.

What you get

What you get

  • The account locked down and the attacker removed
  • Hidden rules and connected apps removed
  • A summary of what was sent and what changed
  • MFA switched on to help prevent it happening again
Why PCE

Why Perth businesses call PCE

No lock-in

Book a technician when you need one. No ongoing managed-services contract required.

Onsite or remote

We choose the route that gets you working again, and come onsite when it's needed.

Plain-English notes after every job

You'll know what was wrong, what we changed and what to watch for.

Honest recovery assessment

We'll tell you plainly what can be recovered and confirm the cost before any work starts.

Questions

Hacked email answered

How quickly can you help?+

During business hours, Monday to Friday, 8am to 4pm, call us and we'll start as soon as we can, usually remotely.

What if it happens after hours?+

Call your bank if a payment may be affected, change the password from another device if you can, and report it at cyber.gov.au. Then book us for the next business day.

Can you get money back that was paid to a scammer?+

No. Your bank is the place to start. We help secure the account and find out what happened.

How do we stop it happening again?+

Multi-factor authentication, a password manager and some training make it much harder. We'll recommend what fits.

Service area

We cover most of Perth

Onsite across most of the Perth metro area, and remote help anywhere in Perth.

  • Onsite across most of the Perth metro area
  • Remote help anywhere in Perth
See all service areas →

Lock it down and get back in control

Book an experienced technician online, or tell us what's happening and we'll recommend the right next step.

Call 08 6559 6485

Phones and technicians: Monday to Friday, 8am to 4pm