Netflix Account Hacked and Email Changed?
How to Get It Back (Including Sky and Virgin Billing)

Last updated: 8 November 2026 · Author: Baizaar Lee · Primary sources: Netflix Help Centre pages on account access, devices, sign-in alerts, email changes and phishing

BAIZAAR may earn a commission if you sign up to Proton through links on this page, at no extra cost to you. Getting your Netflix account back costs nothing, and every recovery step below comes well before anything we’d sell you.

You sat down to watch something, Netflix greeted you in Spanish, and there’s a profile next to yours that nobody in the house will own up to. Or an email turned up saying the address on your Netflix account has been changed, and you definitely didn’t change it. Either way, this page gets your Netflix account back in the right order, then deals with the British billing wrinkle that can cost Sky and Virgin Media customers a week of evenings, and finishes with the two changes that stop the same person strolling back in next month.

HBO Max been raided as well? The HBO Max version of this guide runs the same routine with HBO’s own buttons, with one handy difference: changing an HBO Max password signs every device out on its own.

---

What are the signs your Netflix account has been hacked? (Start With the Language)

The loudest sign is Netflix suddenly speaking a language nobody in your house chose, because stolen logins get resold, whoever ends up with yours tends to set their profile to their own language, and that’s how so many people end up typing ‘Netflix account hacked Spanish’ into Google at eleven at night with the remote still in their hand. It’s the streaming equivalent of finding a stranger’s shoes in your hallway.

Four other signs are easier to miss, and one of them is serious.

• Language changed. Menus or subtitles in a language you never picked.
• A new profile you didn’t make. Usually a generic name, sometimes with a Continue Watching row full of shows you’ve never heard of, which is oddly the most insulting part.
• A new sign-in email. Netflix emails you whenever a new device signs in and works out the location from that device’s IP address, so the town can be a bit off. A different country is still a different country, mind you.
• An email or phone changed notice. Somebody has stopped borrowing your account and started taking it. Drop everything.
• An unknown device in Manage Access and Devices. That page lists each device’s type, the profile it last used and when it last played something.

Don’t read too much into a clean device list the morning after, though. Netflix says new devices can take up to 48 hours to show up, and anything that hasn’t been used for 90 days is left off entirely, so an empty page proves rather less than you’d hope.

What to do in the first ten minutes if you can still sign in to your Netflix account

Do these in order. Each one shuts a door the next one relies on.

1. Change your password. Netflix wants one that’s unique to Netflix, at least eight characters, with upper and lower case, numbers and symbols. If the page offers to sign out every device as you save it, take it.
2. Sign out of all devices anyway. Account, then Manage Access and Devices, then Sign Out of All Devices at the very bottom. It boots everyone, you included, so have the new password handy for the telly.
3. Check every profile for an email address. A Netflix profile can have an email address attached these days. Open Manage Profiles and delete any address you don’t recognise, and Netflix says whoever’s using it gets signed out within 24 hours.
4. Check the email address and phone number on the account. If either has been swapped, put yours back now, whilst you still hold the keys.
5. Set the language back. Purely cosmetic, still satisfying.
6. Change your email password too if it was ever the same as your Netflix one. Why that matters so much comes up a couple of sections down.

Is signing out of all devices enough on its own? No.

It boots the intruder off every screen, which feels terrific for about ninety seconds, and then they sign straight back in with the password they already have, so change the password first and press the big button second, which happens to be the exact order Netflix’s own help centre gives (credit where it’s due, the official documentation is spot on here).

Got HBO Max and Disney+ in the house as well? Our guide to kicking someone off Netflix, HBO Max or Disney+ lines up each service’s sign-out buttons side by side, which saves an evening of rummaging through three different settings menus.

What if the hacker changed the email on your Netflix account? (The Nasty Version)

Then every password reset goes to their inbox, and most of the self-service options close behind you. This is the version of a Netflix account hacked situation that turns a ten-minute job into a support chat and an evening of refreshing your inbox.

Netflix does cover it, briefly. Its help page on an email changed without permission says, in full, to contact Netflix. There’s no secret button. Support is the route.

Before you open that chat, try two things on netflix.com/loginhelp, because one of them occasionally saves the whole afternoon.

• Reset by text. If the hacker changed the email but forgot about your mobile number, the reset code still comes to you and you’re back in.
• Choose I don’t remember my email or phone. Netflix then asks for the first and last name on the account and the number of the card that pays for it. If that option doesn’t appear, Netflix says recovery by billing details isn’t available in your region, so treat it as a bonus if it shows up at all.

Neither worked?

Then go to Netflix support with three things ready, the email address the account used to have, the card or billing account that pays for it, and roughly when things went wrong, and keep the new sign-in email and the email changed notice sitting in your inbox, because they’re your evidence and deleting them in a fit of tidiness is the most common own goal in this entire process.

Netflix account hacked on Sky or Virgin Media: who do you contact?

Both of them, and Netflix first.

This bit is almost entirely British, and it’s where people lose a week of evenings to hold music. If your Netflix came as part of a Sky or Virgin Media package, the monthly bill comes from Sky or Virgin and Netflix never sees your card, which can mean there’s no card of yours on file at all, and that knackers the card-based recovery route from the section above.

Meanwhile your TV provider can see perfectly well that you pay for Netflix, and as far as we could find it can’t reset a Netflix password for you. So you end up with two companies, each holding half the proof, each suggesting with great warmth that you ring the other one.

The Sky Community help forum is stuffed with threads from people bounced back and forth exactly like this. Neither company publishes a joint recovery process that we could find, so this is the approach that gives each side the piece it’s missing:

• Tell Netflix the account is billed through Sky or Virgin Media, and ask straight out what proof it’ll accept instead of a card.
• Ask Sky or Virgin Media to confirm in writing that Netflix is on your customer account, and since when. An email is far easier to forward than a phone call is to quote.
• Put both reference numbers in one note on your phone.

You’ll be asked for them again, probably by the second person you speak to and quite possibly by the third.

Tedious? Very. But it hands each company the half of the story it can’t see for itself, and that’s the best shot you’ve got at getting a Netflix account billed by Sky or Virgin back without losing a whole week to it.

Netflix is asking you to verify a payment you didn’t make (Don’t Tap the Link)

If that request arrived by email or text, assume it’s fake until you’ve checked, because Netflix says it will never ask you to share your password, card numbers or bank details that way, or to pay through a third-party website.

Account on hold, payment failed, please verify your billing details: these are some of the oldest phishing lures going, and somebody who’s just been hacked is their ideal audience, jumpy and keen to get the whole mess sorted before bedtime.

Open the Netflix app, or type netflix.com into the browser yourself, and look at the account from there. A real problem will show. If your card statement has charges you don’t recognise, ring your card issuer as well and ask them to block it.

Same goes for a Netflix temporary access code you never asked for. A code you didn’t request means someone is trying your login on a telly you’ve never seen, so don’t pass it to anyone who messages you for it, however friendly or official they sound.

Why did your Netflix account get hacked?

Almost certainly because the password was used somewhere else, or lifted straight off an infected computer. Very few Netflix logins get guessed. They get collected.

In January 2026 the security researcher Jeremiah Fowler found an exposed database holding 149,404,754 unique logins and passwords, with Netflix, HBO Max and Disney+ credentials in the sample, most likely hoovered up by infostealer malware, as CX Today reported at the time. Infostealers copy saved passwords out of browsers on infected machines. If you once used your Netflix password on some forum that got breached years ago, it’s very likely sitting on a list somewhere, and automated tools try lists like that against streaming logins all day long.

There’s a market for what they find, too. In May 2026 Cord Cutters News reported an analysis of roughly 75,000 dark-web listings for stolen data, which found streaming accounts sold for about $15 on average. The handful of Netflix listings averaged $15.60, with a median of just $4.55, which makes your Netflix account worth rather less than a takeaway curry. Nobody singled you out, they didn’t need to.

To see whether your email address has turned up in a known breach, search it on Have I Been Pwned, the free lookup run by security researcher Troy Hunt. If it appears, treat any password you used on those sites as public property.

If that search just coughed up the password you use for half your life, that’s the reuse habit worth killing tonight, and a password manager is by some distance the least painful way to do it. See Proton Pass’s current plans →

How to lock your Netflix account so it stays locked

Two changes stop most repeat break-ins: give Netflix a password nothing else uses, and lock down the inbox that can reset it.

A password Netflix shares with nothing else

Netflix’s own help centre says a password manager can make it easier to keep track of unique passwords, and frankly that’s the whole case for one in a single line. Nobody memorises forty random strings, so people reuse three, and reuse is how most of these accounts get opened.

The one BAIZAAR pays for is Proton Pass. It generates and fills a different password for every site, keeps 2FA codes in a built-in authenticator for the services that offer one, and watches the dark web for your details turning up. The hide-my-email aliases are the clever bit, mind you, because if you sign up to each streaming service with its own alias, a leak from one never hands anybody the login for another. Pass Plus is $1.99 a month on the 12-month deal through our link ($23.88 for the first year, then $35.88 a year), or £1.59 a month in the UK (£19.08, then £28.68). The free plan is enough to break the reuse habit, if you’d prefer to start there.

An inbox nobody else can get into

Your email account is the master key. Whoever controls it can reset Netflix, HBO Max, your bank and most of the rest of your life, which is exactly why a hacker who gets this far changes the Netflix email before doing anything else, and why it’s worth five minutes today checking that your email password is used nowhere else at all. Then switch on whatever second step your email provider offers.

If you’d like a separate, encrypted recovery inbox that never goes near a public sign-up form, Proton Mail is worth a look. In Proton’s Black Friday sale Mail Plus is $1.99 a month for the first year ($23.88, then $47.88 a year), or £1.59 a month in the UK (£19.08, then £38.28). Our Proton Mail Plus review covers what you get and where it falls short. Sorting out several accounts at once? Proton Unlimited bundles Pass and Mail, and is $6.49 a month for the first year in the same sale (£5.19 in the UK).

Prefer to compare first? Fair enough. Our ranking of the most secure password managers in 2026 covers the alternatives, warts and all.

What you see	What it probably means	What to do
Menus in Spanish, or any language you never set	Someone else is signed in and has made a profile theirs	Change password, sign out of all devices, reset the language
A profile you did not create	An intruder, or someone who bought your login	Sign everyone out, then delete the profile
New sign-in email from Netflix	A new device signed in, located by IP address	If it was not you, change the password immediately
Email or phone changed notice	A takeover in progress	Reset by text if you can, then contact Netflix
Payment problem email or text with a link	Very likely phishing	Ignore the link and check the account in the app
Reset email never arrives	The account email is no longer yours	Contact Netflix, plus Sky or Virgin Media if they bill you

Swipe the table sideways for the third column.

Why your Netflix account is only as safe as your inbox

Netflix makes the easy half of this easy. Signing everyone out is one button, and the help pages are refreshingly clear. The hard half, getting the account back once the email has gone, still runs through a support conversation with no published timescale and no appeal if it goes badly, and that’s before you add a Sky or Virgin bill into the mix.

The bigger gap is structural. Your bank texts a code to your phone before it lets anyone in. Netflix leans on two things, the password and the email address behind it, so your Netflix account is exactly as secure as those two and not one bit more. Slightly bleak, but at least the fix is yours to make, which is more than most security stories can offer.

Netflix account hacked tonight? What we’d do, in order

If you can still sign in, it’s a five-minute job, new unique password, sign out of all devices, strip any profile email you don’t recognise, done.

If the email has already been changed, try a text reset at netflix.com/loginhelp, then go to Netflix support with your evidence, and drag Sky or Virgin Media in if they’re the ones billing you.

After that, give every streaming service its own password. The login that opened Netflix is almost certainly on the same lists being tried against HBO Max and Disney+ right now, so would you prefer to fix it once, or three times?

Netflix account hacked FAQ

Why did my Netflix language change to Spanish?

Usually because someone else is using your account and has set their profile to their own language. Change the password, sign out of all devices, then switch the language back in Manage Profiles.

Does sign out of all devices remove a hacker from Netflix?

Only until they sign back in. Change the password first, then sign out of all devices, otherwise the intruder just strolls back in with the same login.

What do I do if a hacker changed my Netflix email?

Try a reset by text at netflix.com/loginhelp first, then contact Netflix. Its help page on an email changed without permission sends you straight to support, so have your old address and payment details ready.

Someone changed the phone number on my Netflix account. What now?

Put your own number back straight away if you can still sign in, and change the password whilst you’re there. If you can’t sign in, contact Netflix support and tell them both contact details may have been changed.

My Netflix account was hacked on Sky. Who do I contact?

Both Netflix and Sky. Sky handles the bill and Netflix handles the account, so recovery can need proof from each, and written confirmation of your Netflix subscription from Sky is the useful thing to pass across.

Will Netflix refund me if my account was hacked?

Possibly, at Netflix’s discretion. We found no published refund policy for hijacked accounts, so ask support directly and talk to your card issuer about any charges you didn’t make.

Can I get my deleted Netflix profiles back?

Ask Netflix support, but don’t count on it. We couldn’t find a documented way to restore a deleted profile, so assume watch history an intruder removed may be gone.

How do I know if my Netflix password was leaked?

Search your email address on Have I Been Pwned. If it shows up in a breach and you reused that password anywhere, change it on Netflix and on every other site that shared it.

Can someone use my Netflix account without me knowing?

Yes, for a fair stretch. Check Manage Access and Devices, but bear in mind Netflix says new devices can take up to 48 hours to appear and inactive ones are hidden, so keep an eye out for new sign-in emails and unfamiliar titles in Continue Watching as well.

Is an email saying my Netflix account is on hold real?

Treat it as phishing until you’ve checked the account in the app yourself. Netflix says it never asks for passwords, card numbers or bank details by email or text.

Does a VPN stop my Netflix account being hacked?

No. Account takeovers almost always come from reused or stolen passwords, and a VPN does nothing about either. If your real problem is Netflix refusing to play over a VPN, that’s a separate headache, covered in our guide to Netflix not working with a VPN.

How we verified this

Every Netflix step on this page comes from Netflix’s own help centre, first read on 16 October 2026 and re-checked on 6 November 2026: the pages on stopping someone using your account, managing access and devices, new sign-in emails, an email changed without permission, a forgotten email or phone number, and phishing. The breach and dark-web figures come from CX Today (January 2026) and Cord Cutters News (May 2026), and we cite those publications directly.

We have no relationship with Netflix, Sky or Virgin Media, and we have not described any partner billing process as fact, because none is published. Proton prices were read from Proton’s partner offer pages on 6 November 2026, during its Black Friday sale, and change often.

Sources

• How to stop someone from using your account, Netflix Help Centre. Source for the unique password and password manager advice.
• Manage Access and Devices, Netflix Help Centre. Source for sign-out steps, the 48-hour delay and the 90-day rule.
• I got an email about a new sign-in to my account, Netflix Help Centre. Source for sign-in alerts, the note that locations come from IP addresses, and the 24-hour removal of unknown profile emails, which is the step most people miss.
• Netflix account email was changed without permission, Netflix Help Centre.
• Forgot email or phone number, Netflix Help Centre. Source for recovery by name and card number, and the regional limit.
• Phishing or suspicious emails or texts claiming to be from Netflix, Netflix Help Centre.
• Netflix login help, the reset page with the email, text and I don’t remember my email or phone options.
• Massive credential leak exposes 149 million stolen logins, CX Today, 26 January 2026.
• From binge-watching to breached, Cord Cutters News, 22 May 2026.
• Have I Been Pwned, free breach lookup.

Related BAIZAAR guides

• How to kick someone off Netflix, HBO Max or Disney+
• HBO Max account hacked: what to do when the email has been changed
• The most secure password managers in 2026
• Proton Mail Plus review 2026