What Do I Do If My Account Has Been Compromised?

What Do I Do If My Account Has Been Compromised?

I think I just got scammed. What should I do?

Act fast. The sooner you lock things down, the more you can protect.

1. Lock your Coinhako account. This stops anyone else from using it. Two ways to do it:

  • In the Coinhako app or website: go to Hub > Account > Account information > Manage my account > Lock my account, enter your password, then tap Lock my account.
  • If you got an email telling you someone logged in: tap the lock account link in that email and follow the steps on screen.

2. Change your passwords. Start with your email, then any other account that shares the same password. Use a different password for each one.

3. Report it to the police. Contact your local police or your country's cybercrime reporting service. Many countries let you file a report online — search for your national police or cybercrime website, or visit a police station in person.

If you're in Singapore: file a report online or at any Neighbourhood Police Centre. You can also call the ScamShield Helpline on 1799 for advice.

4. Submit a ticket to Coinhako. Tell us about the suspicious transaction and attach your police report. The more detail you give us, the more we can help.

Crypto transfers cannot be undone once they are sent, so report it as soon as you can. Reporting early gives you and the authorities the best chance of tracing where the funds went.

How can I protect myself from scams?

  • Never share your personal details — your email address, bank details, or passwords.
  • Coinhako will never ask for your password. Anyone who does is a scammer, no matter who they claim to be.
  • Don't save your card details or passwords in your browser. If someone gets into your device, they get those too.
  • Check your bank and card statements regularly so you spot anything unusual early.
  • Only log in through the Coinhako app or our website. Type the address yourself instead of clicking a link in an email or message. Fake sites can look identical to the real one.
  • Be suspicious of big promises. Guaranteed returns, doubling your crypto, limited-time offers — if it sounds too good to be true, it is.
  • Take your time. Scammers create panic and rush you. Anyone pushing you to act "right now" is a warning sign in itself.
  • Check before you act. If you're not sure whether a message, call, or offer is real, ask someone you trust.

If you're in Singapore: you can check anything suspicious with the ScamShield Helpline on 1799 or at scamshield.gov.sg.

How can I keep my account secure?

  • Turn on Two-Factor Authentication (2FA). This is the single best thing you can do. Even if someone has your password, they can't get in without your second code.
  • Act on login alerts you don't recognise. If you get an email about a login that wasn't you, lock your account straight away using the link in that email.
  • Use a strong, unique password. Long and random beats short and clever. A password manager can create and remember them for you.
  • Don't use personal information in your password — your name, your birthday, or anything someone could find on your social media.
  • Avoid public WiFi for anything financial. If you must use it, use a trusted VPN.
  • Don't open links or attachments unless you're sure who sent them.
  • Don't install software because a stranger asked you to — especially anything that lets someone else control your screen or device.
  • Keep your phone and computer updated. Updates fix the security holes attackers rely on.