What to do if you’ve been hacked
Last updated: 06 August 2025 | Estimated read time: 3 Minutes
That sinking feeling when you realise your personal information may have been compromised is something no one wants to experience. Unfortunately, cyber security threats are becoming more common — and data breaches are on the rise, according to the Office of the Australian Information Commissioner (OAIC)1.
If you think you’ve been hacked, there are steps you can take to help manage the situation and reduce further risk.
Recognising a potential hack
Here are some common indicators that may suggest a device or account has been compromised:
- Unusual activity on your accounts
- Unexpected password changes or login attempts
- Strange messages sent from your email or social media
- Alerts from your antivirus software
What you can do
%20(1).svg){kind=icon}
Tip 1: Disconnect your devices
Tip 2: Identify what was affected
Tip 3: Update your passwords
If you believe your login credentials were compromised, updating your passwords is a common next step. Research shows that 70 percent of the passwords Australians use2 can be cracked in seconds, so longer, more complex passwords that are also frequently changed may offer stronger protection.
Using multi-factor authentication and a password manager may also help enhance account security.
Tip 4: Scan and update your devices
Tip 5: Report the incident
Tip 6: Monitor your accounts
After securing your accounts, it may be helpful to continue monitoring for unusual activity such as unauthorised purchases, automatic transactions, or changes to account details.
You can also check your credit report history for transactions you don't recognise, which are a common consequence of identity theft. This can help you spot suspicious activity early and take action to protect your financial wellbeing.
Tip 7: Let others know
Reducing future risk
While no system is foolproof, being aware of common scam tactics may help reduce exposure to future threats. Here are some general practices:
- Be cautious with unsolicited messages or unfamiliar contacts
- Avoid clicking on unknown links or attachments
- Watch for typos or unusual domain names in emails
- Avoid downloading files from unverified sources
- Use secure internet connections when possible
- Shred sensitive documents before disposal
- Limit sharing of personal information
Need support? We’re here to help.
At Pepper Money, we’re committed to helping our customers feel safe and secure online. You can stay informed with the latest security updates and resources at our Security Centre.
If you suspect a phishing attempt related to Pepper Money, or believe your account may have been compromised, please contact our Customer Service team on 137 377.
Frequency asked questions about being hacked
You might notice some unusual password reset emails, unauthorised transactions on your bank statements, or receive calls about products or services you’ve never paid for or used. Or, you might find you’re locked out of your own accounts.
Immediately change your passwords (starting with email and banking).
There are several places you should report cybercrime to, including Scamwatch (scamwatch.gov.au), IDCARE (idcare.org), and the Australian Cyber Security Centre (ASCS – cyber.gov.au).
Contact any financial institutions you deal with and let them know so they can take the appropriate action. They may be able to freeze accounts, issue new cards, or monitor for suspicious activity.
It depends. If you act quickly, banks may be able to reverse fraudulent transactions.
Sources:
2Source: Sydney Morning Herald https://www.smh.com.au/technology/protecting-passwords-the-best-ways-to-keep-your-data-safe-20231212-p5eqtq.html
Contributor | Steve Meek, Chief Information Officer
Steve joined Pepper Money in 2021 as Chief Information Officer. With over 20 years of diverse experience, he specialises in leveraging technology to drive business growth, enhance operational performance, improve customer experience, and foster innovation. Read more.
Want to find out where you stand?
Sign up to our newsletter
If you like this article, you'll love our monthly Real Lives newsletter.
Personal information is collected, used, stored and disclosed in accordance with Privacy Policy. You can opt out of this newsletter at any time by using the unsubscribe link provided at the bottom of each email.
Want to make sure you're secure online?
Our resources are here to help you navigate online security—from spotting suspicious emails to securing your accounts, and even guiding you through steps if your data is compromised.
Information provided is factual information only and is not intended to imply any recommendation about any financial product(s) or constitute tax advice. If you require financial or tax advice you should consult a licensed financial or tax adviser.
All applications for credit are subject to credit assessment, eligibility criteria and lending limits. Terms, conditions, fees and charges apply.
Pepper Money Personal Loans is a brand of Pepper Money Limited. Credit is provided by Now Finance Group Pty Ltd, Australian Credit Licence Number 425142 as agent for NF Finco 2 Pty Limited ACN 164 213 030. Personal information for Pepper Money Personal Loans is collected, used and disclosed in accordance with Pepper’s Privacy Policy & the credit provider’s Privacy Policy.
Pepper Money Limited ABN 55 094 317 665; AFSL 286655; Australian Credit Licence 286655 (“Pepper”). All rights reserved. Pepper is the servicer of home loans provided by Pepper Finance Corporation Limited ABN 51 094 317 647. Pepper Asset Finance Pty Limited ACN 165 183 317 Australian Credit Licence 458899 is the credit provider for asset finance loans.
Pepper and the Pepper Money logo are registered trademarks of Pepper Group Assets (Australia) Pty Limited and are used under licence.
