If you receive a password reset email for your social media, online
banking, email or shopping account that you didn’t request, it could be a
sign that someone is trying to access your account without your
permission.
These emails aren't always a sign that you've been hacked, but
it's important to know how to respond. Our tech expert, Tom Morgan,
explains how to tell if the email is genuine, and what steps you should take next if you didn’t make the password reset request yourself.
Source: Which? ( 22 Apr 2026)