Skip to main content
    Step 1 of 4
    Safety & Privacy
    Beginner
    3 min read 4 stepsApril 19, 2026Verified April 2026

    What to Do When You Get a "Suspicious Login" Alert

    Google, Facebook, and banks send alerts when someone logs into your account from a new device. Here is how to tell if it was you — and what to do if it was not.

    At a Glance

    Category
    Safety & Privacy
    Difficulty
    Beginner
    Read Time
    3 min read
    Steps
    4
    Topics covered
    suspicious login
    account security
    new device alert
    account compromise
    google
    facebook

    In this guide (4 steps):

    1. 1.Read the alert carefully to identify what happened
    2. 2.Verify the login by checking your account directly
    3. 3.If it was NOT you — act immediately
    4. 4.Prevent future unauthorized access
    1

    Read the alert carefully to identify what happened

    ~42s
    A legitimate login alert from Google, Facebook, or a bank includes: the date and approximate time of login, the city/region and device type ("Windows PC in Phoenix, AZ" or "iPhone in Chicago"), whether the alert is from the service itself (check the sender email address carefully — fake alerts come from look-alike addresses). Ask yourself: Was I in that city recently? Was I using that type of device? Did I just log in somewhere new? If the answer is "yes, that was me," no action is needed.

    Quick Tip

    Quick Tip: If you receive an alert about a login that seems suspicious, do NOT click links inside the alert email — go directly to the service's website by typing the address in your browser. Clicking email links is how phishing attacks work.

    2

    Verify the login by checking your account directly

    ~26s
    Go directly to the service (type google.com, facebook.com, etc. in your browser — don't use a link from the email). Sign in. Look for "Security" or "Account Activity" settings. On Google: myaccount.google.com → Security → "Your devices" and "Recent security activity." On Facebook: SettingsPassword and Security → "Where you're logged in." Review the list for unfamiliar devices or locations. If you see an active session you don't recognize, there may be an intruder.
    3

    If it was NOT you — act immediately

    ~38s
    If you see an unfamiliar login: change your password right away (use a strong, unique password). Log out all other devices — in Google: myaccount.google.com → SecurityYour devices → click each unfamiliar device → Remove. In Facebook: SettingsPassword and Security → "Where you're logged in" → click the device → "Log out." Turn on two-factor authentication right away if it is not already enabled. Contact the service's support if you cannot access your own account.

    Warning

    A genuine suspicious login alert from a legitimate company will never ask for your password or payment information. If an alert email asks for your password or a fee to "restore" your account, it is a phishing scam.

    4

    Prevent future unauthorized access

    ~27s
    After securing your account: turn on two-factor authentication (requires a code from your phone for any new login). Use a unique password for this account — never reuse passwords across multiple sites. Consider a password manager (like Bitwarden, free) to generate and store strong unique passwords. Set up account activity alerts so you are notified of future logins. Check if your email address was in a data breach at haveibeenpwned.com — a free, safe service that tells you if your email appeared in known breaches.

    You Did It!

    You've finished reading: What to Do When You Get a "Suspicious Login" Alert

    How well did this guide stick with you?

    Need more help? Book a TekSure tech

    You receive an email from Google, Facebook, your bank, or another service: "We noticed a new sign-in to your account" or "Suspicious activity detected." Your heart rate goes up. Is someone in your account? Should you panic?

    Most of the time, these alerts are triggered by routine activity that looks unusual — signing in on a new device, traveling to a different city, or using a different browser. But sometimes they show a real intrusion, and knowing how to tell the difference — and what to do in each case — can protect your accounts.

    This guide walks through how to respond to login alerts from the most common services.

    Rate this guide

    How helpful was this guide?

    suspicious login
    account security
    new device alert
    account compromise
    google
    facebook

    Official Resources

    FTC Consumer ProtectionCISA — Cybersecurity TipsAARP Fraud Watch Network

    Sources used to create and verify this guide. View all sources →

    ← Previous

    How to Use a Tile or AirTag Tracker to Find Lost Items

    Next →

    Common Venmo and Cash App Scams — and How to Avoid Them

    Still stuck? Let a pro handle it.

    A real person can walk you through this over the phone, anywhere in the US. If we can't fix it, you don't pay.

    Book a Verified Tech How It Works

    Learn more from official sources

    Related Guides

    How to Secure Your Home Wi-Fi Network

    Simple steps to lock down your home router, keep strangers off your network, and protect every device in your house.

    3 min read

    Setting Up Two-Factor Authentication (2FA) on Any Account

    Add a second layer of security to your most important accounts. This one change stops most account takeovers cold.

    3 min read

    Staying Safe on Social Media

    How to protect your privacy on Facebook and Instagram, spot fake accounts, and avoid the most common social media traps.

    3 min read