1. Use a trusted device
Stop using a device that may contain unknown remote-access software or malware. Update the operating system and browser before recovery.
Account recovery guide
Cricket ID hacked? Recover and secure your account
Act quickly, but use only verified channels. This checklist prioritises email security, password changes, session control, evidence and fraud reporting.
Immediate action: secure the associated email first. If you can still sign in, change the affected password from a trusted device and sign out other sessions. If you are locked out, use only the service’s verified recovery route.
On this page
Signs that an account may be compromised
- A login or OTP alert appears when you did not try to sign in
- Your password, phone number or email changes unexpectedly
- You are locked out although the details were correct
- Unknown activity, messages or transactions appear
- A recovery message arrives that you did not request
One alert does not always prove a takeover, but it is enough reason to inspect the account through a verified route. Do not follow the link inside a suspicious message.
How to recover and secure the account
2. Secure the associated email
Email often controls password resets. Change its password, enable multi-factor authentication and review recovery details, forwarding rules and active sessions.
3. Open the genuine website independently
Type a previously verified address or use the official app. Avoid login links sent by unknown contacts. Review our fake website checklist if the domain is uncertain.
4. Reset the Cricket ID password
Create a long, unique password that is not used anywhere else. Never share the new password or OTP with support. If you still control the registered contact method, follow our safe password-reset steps.
5. Sign out unknown sessions
Use “log out all devices” or session management if available. Remove unfamiliar devices, apps and connections.
6. Check account details and activity
Review the registered email, phone, recovery options, messages and transactions. Record anything you did not authorise.
7. Contact verified support
Use the contact route published on the genuine website. Explain the timeline and provide non-secret identifiers—never a password, PIN, OTP or recovery code.
If you cannot sign in or recovery details have changed
Do not keep guessing passwords or trust a stranger who offers to recover the account over chat. Open the verified service website or app yourself and use its published account-recovery route. If the registered email or phone has changed, tell verified support what changed and when. If you cannot access your email either, use your email provider’s own recovery process.
If you shared a password, OTP or reset link, treat the account as exposed. From a trusted device, change any password reused on other services. Once access is restored, sign out other sessions, check recovery details and review activity. Never give a fresh OTP or identity document to an unverified contact. For code-specific next steps, read what to do after sharing a Cricket ID OTP.
Evidence to save
- Suspicious website URLs and message links
- Phone numbers, email addresses and social handles
- Login alerts and account-change notifications
- Transaction references, amounts and timestamps
- Screenshots of conversations and unauthorised activity
Keep original messages where possible. Do not delete evidence until the service, bank or authorities confirm it is no longer required.
If money or payment details are involved
- Contact your bank or payment provider immediately through its official number or app.
- Ask what protective action is available for the account or transaction.
- For cyber financial fraud in India, call 1930 promptly.
- Submit the incident through the official National Cyber Crime Reporting Portal.
- Continue monitoring related financial and email accounts.
How to reduce the risk of another takeover
- Use a different password for every important account
- Enable multi-factor authentication where available
- Keep recovery email and phone details current
- Never share an OTP, PIN, password or reset link
- Review sessions and login alerts regularly
- Remove remote-access apps you do not recognise
See our detailed guide to Cricket ID passwords, OTPs and recovery codes.
Official reporting resources in India
Report cybercrime through the National Cyber Crime Reporting Portal. For broader safe-account practices, consult the CERT-In Digital Safety Compass Handbook.
For general hacked-account recovery steps, see the US Federal Trade Commission’s account-recovery guide. Recovery options vary by service.
Continue learning
Review the main Cricket ID meaning and safety guide. If you can still access the account but sign-in is unreliable, use our Cricket ID login troubleshooting guide. You can also read the online Cricket ID guide or visit the Cricket ID FAQ.