User is saying their account is hacked

Ask them to use unique and strong password, also enable two Factor Authentication