Investment or brokerage account hacked: what to do

1. Call the brokerage's fraud line (not regular support) and say: 'I believe my account is compromised. Please freeze trading and withdrawals immediately.' Get a case number.

   More detail

   Fidelity 1-800-544-6666 · Schwab 1-888-391-1334 · Vanguard 1-800-662-2739 · E*TRADE 1-800-387-2331 · Wealthsimple in-app · Questrade 1-888-783-7866 · TD Direct 1-800-465-5463.

2. Ask them to reverse unauthorized trades from the last 24–72 hours, cancel any pending ACH/wire transfers, and remove unfamiliar linked external bank accounts.

3. Change your password and switch 2FA from SMS to an authenticator app or hardware key — SIM swaps target SMS 2FA on brokerages first.

4. Sign out of every session and screenshot the unauthorized activity before the broker adjusts the account.

1. Ask for a verbal-password / callback-required flag on every withdrawal for the next 30–60 days.

2. Review beneficiaries, authorized users, and 'trusted contacts' — remove anyone you don't recognize.

3. Check for newly enabled features (margin, options, crypto) and disable what you didn't request.

4. File a written follow-up to the brokerage's fraud team — most firms need a signed affidavit to formally dispute trades.

1. Get the brokerage's written determination on whether trades will be reversed — required for any SIPC, IIROC, or CIRO dispute.

2. If the entry point was your email, run the Email playbook in parallel and assume any other money account using that email is at risk.

3. 🇺🇸 US

   File a report with the SEC and FINRA (US) or CIRO and your provincial securities commission (Canada).

   SEC TipsFINRA Investor Complaint
4. 🇨🇦 CA

   Report to the Canadian Investment Regulatory Organization and your provincial securities commission.

   CIRO

1. Use a separate email address for financial accounts; turn on trade / transfer / login alerts for everything; use a hardware security key where supported.

Related situations