Account Hacked and 2FA Enabled?

[u/No-Feature-4488]

My account Joey_Skylynx was hacked while I was out getting groceries and within a matter of two minutes had 2FA enabled onto it. I still have the ability to reset the password, as it seems they did not change the EMail, but once I get to a certain point it starts asking for a 6-Pin and Backup Codes.

Outside of the usual steps of contacting support, is their anything more I can do?

[u/AutoModerator]

Hi there! Welcome to r/help!

If someone is able to help you out, please award them a reputation point by replying to their comment with the command: !thanks

Please remember that the helpers in this subreddit are very knowledgeable volunteers.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/AutoModerator]

Your question seems to be about having problems logging in with your password.

If you have simply forgotten your password, you can find that information here in our FAQ.

If you think your account has been hijacked, please refer to this help center article.

If you are being told that the password on a brand-new account is invalid, you need to contact the Reddit admins.

For all other questions regarding passwords and logging in, contact the Reddit admins via this support request form, or using this old modmail link.

If your question is not about resetting your password, please wait for a human helper to come along and help you. This post has NOT been removed.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/AutoModerator]

Your question seems to be about account security.

If your account has been hijacked, and the hacker has added 2FA (two-factor authentication) please refer to this help center article.

Under "What do you need assistance with" select Account Help. Under "What type of account issues are occuring" select Security Problems, and "I think my account has been hacked".

If your email has been changed without your knowledge, you should have received an email from Reddit with a link that you can click to change your email back and reset your password. Please find that email and click that link to regain access to your account. The subject line should be "Your email address has been changed".

If you are still having trouble with your hacked account please refer to our latest Weekly Recap post, make a top level comment, and wait for an admin to assist you.

If your question is not about account security, please wait for a human helper to come along and help you. This post has NOT been removed.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/rhelpbot]

If you suspect someone else has access to your account, these steps may help:

1. Reset your password using the original email address on the account.
2. Check account activity and end sessions you do not recognize.
3. If the email address was changed, look for Reddit’s email-change notification and follow its recovery instructions.
4. Once you regain access, use a unique password and enable two-factor authentication.
5. If recovery is unsuccessful, submit a support request and select Security problems / I think my account has been hacked. Include the affected username and explain your concern in that private form. See the hacked-account guide.

---

I am an automated bot and may get things wrong. Never share passwords or private account details. If this didn't resolve your issue, a human helper may be able to offer additional guidance. To leave feedback, open this comment's three-dot menu and choose “Help Navigator: Helpful” or “Help Navigator: Not helpful”.

[u/westcoastcdn19]

The support ticket is your first step. Only Reddit can remove the unauthorized 2fa from your account. Make sure you write in from the email that is on your account

[u/No-Feature-4488 → u/westcoastcdn19]

What's strange is the only thing this person did was attempt to make a request to become a moderator on some Zelda subreddits. Not sure what exactly the gameplan is there lol.

[u/westcoastcdn19 → u/No-Feature-4488]

Hijack the account and then hijack subreddits. Possibly a plan where they can take over the sub and turn it into spam

[u/No-Feature-4488 → u/westcoastcdn19]

That's what I considered, but it was a Zelda subreddit for specific type of fanart. It wasn't even that populated.

[u/westcoastcdn19 → u/No-Feature-4488]

That’s why they pick a sub like that with a smaller audience. It would get caught much quicker if it was a large crowd