Reused password
A breach elsewhere can lead to attempts using the same credentials.
Password privacy matters, but losing control of email can also expose other accounts. Protect the contact route used for recovery. Reusing one password lets the impact of a breach spread.
A code normally relates to a particular action. If someone requests it in the name of assistance, consider what it actually authorises. Sharing a code without reading the message can transfer control to someone else.
Unexpected password change notices or altered contact details are significant signs. Do not dismiss them as ordinary browser faults. Note the time and inspect your contact account from a trusted device.
End unfamiliar chats and screen sharing.
Check control of your email and its security instructions.
Note time, message type and changes without including secrets.
Consider these situations separately before deciding how to proceed.
A breach elsewhere can lead to attempts using the same credentials.
Do not give account control to someone requesting remote phone access or codes.
A refresh is not evidence that an unauthorised change has been resolved.

Saved passwords on family or public computers can become accessible to other users. Sign out and remove sensitive downloaded files after personal use. A private browsing window does not remove every risk.
Verify messages that use urgent prizes or account closure threats. Open a familiar address separately instead of acting under pressure. Brand names and images can be copied.
It describes a connection feature, not business identity or a guarantee of all security.
Keep secret verification codes to yourself.
Confirm control of your contact channel and follow recovery instructions.
Use a trusted device, secure your contact access and preserve the event details.