High network activity even when idle. Antivirus protection is disabled without your action. Random restarts or other suspicious activity.If your account is being taken over, signs include: Logins from unknown devices or locations. Being locked out of your own account. Changes to your recovery email or phone number. Receiving password reset emails you didn’t request. Unusual sent messages or suspicious activity New third-party access or app passwords you didn’t authorize.