> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://help.gobundled.com/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# I think my Bundled account has been compromised

If you suspect someone else has access to your Bundled account or any of the services in your bundle, act fast. Here's what to do.

## Right now, in this order

### 1. Change your Bundled dashboard password immediately

Sign into [gobundled.com/dashboard](https://www.gobundled.com/dashboard) and change your password — the one you use to log into Bundled itself (not the Bundled-issued credentials for the services in your bundle).

If you can't sign in because your password has already been changed, click **"Forgot password"** and follow the reset flow. The reset link goes to the email on file for your account.

### 2. Email support@gobundled.com — mark it urgent

Subject line: **"URGENT — Account compromise concern"**

Include:

- The email address on your Bundled account
- What you've noticed (login from a new device, password reset emails you didn't request, services showing activity you don't recognize)
- The approximate time you first noticed
- Whether anyone else has had access to your Bundled login credentials

We treat these as priority and respond within an hour during business hours.

### 3. Check for unauthorized changes

In your dashboard, review:

- **Recent activity log** — any logins, password resets, or settings changes you didn't make
- **Billing history** — any unexpected charges or upgrades
- **Payment method** — make sure it's still your card on file, not someone else's
- **Email and phone** — make sure these are still yours and haven't been changed

If anything looks wrong, mention it in your email to support.

### 4. Check the provider accounts in your bundle

If someone has your Bundled-issued credentials, they could be logging into Netflix, Spotify, and other services on your bundle. For each service:

- Check **recent device activity** (most providers show this in account settings)
- Sign out of all devices (most providers have a one-click option for this)
- Note any unfamiliar profiles or settings changes

We can help you do this systematically — just ask in your support email.

## After the immediate response

Once support has secured your account, we'll work with you to:

1. **Rotate the Bundled-issued credentials** for every service in your bundle — new username/password issued to you
2. **Force sign-out** on every provider account across all devices
3. **Review billing** for any unauthorized charges (we'll help dispute these where appropriate)
4. **Set up additional security** — 2FA on your Bundled dashboard if you don't have it already

## How accounts get compromised

The most common ways:

- **Password reuse** — your Bundled password is the same as one that leaked in another data breach
- **Phishing** — you clicked a fake "Bundled" email that asked for your password
- **Shared credentials** — someone you previously shared access with kept their copy
- **Public computer** — you signed in on a public device and didn't sign out

For all of these, the fix is the same: change passwords, enable 2FA, never reuse passwords across services.

## Prevention

- **Use a unique password** for your Bundled dashboard
- **Enable two-factor authentication** in your dashboard → Account → Security
- **Never share your Bundled-issued credentials** with anyone, even close family (they're tied to your billing)
- **Check the sender address** on any "Bundled" email — legitimate emails come from `@gobundled.com` only
- **Don't click links in unexpected emails** — go directly to gobundled.com

## How to spot phishing

We will **never** ask you to:

- Provide your Bundled password by email or text
- Confirm your full credit card number by reply email
- Click a "verify your account or it will be deleted" link with a tight deadline
- Send money or gift cards to "resolve a billing issue"

Anything that looks like that is a phishing attempt. Forward it to **security@gobundled.com** and delete it.

## Related articles

- [Your privacy choices](https://help.gobundled.com/en/article/your-privacy-choices-xfn4fs/)
- [How Bundled protects your data](https://help.gobundled.com/en/article/how-bundled-protects-your-data-1fqja0w/)
- [How to contact Bundled Support](https://help.gobundled.com/en/article/how-to-contact-bundled-support-f6z9ro/)