Skip to content

RECOVERY

Should I change my email address after a scam?

For most people, changing your email address is not necessary — but securing it is. The real question is whether the scammer has access to your email account, not just your address. Here is how to tell the difference and what to do.

In an active crisis?

  • Call your bank
  • Call the platform (Amazon, PayPal, MobilePay, etc.)
  • Call local police

Two different situations — and two different answers

There is an important distinction between a scammer knowing your email address and a scammer having access to your email account.

  • Scammer knows your email address: They can send you phishing emails or spam. You do not need to change your address — you need to be alert to follow-up contact and mark their messages as spam.
  • Scammer has your email password or has accessed your account: This is more serious. You need to change your password immediately, check for unauthorised activity, and review your account's security settings.

Step 1 — Change your email password immediately if it may be compromised

Do this now: If you gave the scammer your email password, clicked a link in a phishing email, or if the scammer had access to your screen or device, change your email password immediately. Use a strong, unique password that you have not used anywhere else. Then enable two-factor authentication (2FA) on your email account if you have not already done so.

Your email account is the key to most of your other accounts — if a scammer can access your email, they can use "forgot password" to reset your bank, social media, and other accounts. Securing your email is the single most important step.

Step 2 — Check your account for signs of unauthorised access

Do this now: Check your email account's recent activity or login history. Most email providers (Gmail, Outlook, Yahoo) show you a list of recent logins including the device and location. Look for any logins you do not recognise. Also check your sent folder, drafts, and filters — scammers sometimes set up forwarding rules to silently copy your emails.

Important: If you find a forwarding rule or filter you did not create, delete it immediately. This is a sign the scammer has had access to your account and may still be monitoring your emails.

Step 3 — When changing your email address does make sense

Consider creating a new email address if:

  • You are receiving a high volume of phishing or harassment emails that you cannot stop
  • You have reason to believe the scammer has had prolonged access to your account and you cannot be certain all malicious activity has been removed
  • Your email address was exposed in a data breach and is being actively targeted

If you do create a new address, do not abandon the old one immediately — update your important accounts (bank, government services, employer) first, and keep the old address active for a transition period so you do not miss important messages.

Report the scam

You've taken the right steps: You have secured your email account, checked for unauthorised access, and reported the scam. For most people, this is sufficient — a new email address is rarely necessary. This is not your fault.

Related situations

This page was last reviewed: June 27, 2026.
Recovery pages are drafted with AI assistance, then reviewed line-by-line by the editor, sourced against official reporting authorities, and tested for tone and clarity before publication.