# User is saying their account is hacked
**URL:** https://meta.discourse.org/t/user-is-saying-their-account-is-hacked/155409
**Category:** Support
**Created:** [June 20, 2020, 2:06am UTC](https://meta.discourse.org/t/user-is-saying-their-account-is-hacked/155409 "2020-06-20T02:06:59Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@orchardstreet](https://meta.discourse.org/u/orchardstreet)
#### Post date: [June 20, 2020, 2:06am UTC](https://meta.discourse.org/t/user-is-saying-their-account-is-hacked/155409/1 "2020-06-20T02:06:59Z")
they are saying their account is being accessed when they are not logged in, from the same city but different IP
any advice on what to tell them cuz the server is fine.
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [June 20, 2020, 2:36am UTC](https://meta.discourse.org/t/user-is-saying-their-account-is-hacked/155409/2 "2020-06-20T02:36:56Z")
My guess is that they are using VPN, maybe the free one from cloudflare (1.1.1.1) on their phone and don’t know it.
---
### Author:  [@orchardstreet](https://meta.discourse.org/u/orchardstreet)
#### Post date: [June 20, 2020, 2:42am UTC](https://meta.discourse.org/t/user-is-saying-their-account-is-hacked/155409/3 "2020-06-20T02:42:38Z")
they said they use one laptop and the IP they gave me is the same location they ususally use
their main concern, and they keep telling me over and over, is that its showing it as being logged in when they are not logged in
---
### Author:  [@Gulshan\_Kumar](https://meta.discourse.org/u/Gulshan_Kumar)
#### Post date: [June 20, 2020, 3:05am UTC](https://meta.discourse.org/t/user-is-saying-their-account-is-hacked/155409/4 "2020-06-20T03:05:40Z")
Ask them to use unique and strong password, also enable two Factor Authentication
---
### Author:  [@orchardstreet](https://meta.discourse.org/u/orchardstreet)
#### Post date: [June 20, 2020, 3:09am UTC](https://meta.discourse.org/t/user-is-saying-their-account-is-hacked/155409/5 "2020-06-20T03:09:49Z")
they’ve changed their password multiple ties
I think they are just paranoid and it’s a timezone issue though.. If I make them do 2FA and the issue persists they are just gonna leave the forum over what could just be a simple timezone issue
---
### Author:  [@JimPas](https://meta.discourse.org/u/JimPas)
#### Post date: [June 20, 2020, 7:13am UTC](https://meta.discourse.org/t/user-is-saying-their-account-is-hacked/155409/6 "2020-06-20T07:13:52Z")
As an admin you can look at their stats at `admin/users` and click on the user. You can see the IP address they signed up with as well as the last IP used to log in with.
If you go to the user’s preferences page `/u/username/preferences/account`, that will show what Recently Used Devices (browser(s) and IP address(es)) were recently used to log in.
I have one user that apparently has been traveling around California and it shows two different cities in 2 days (2 log ins). Just something to check out to verify your user’s claims.
---
### Author:  [@system](https://meta.discourse.org/u/system)
#### Post date: [July 20, 2020, 7:28am UTC](https://meta.discourse.org/t/user-is-saying-their-account-is-hacked/155409/7 "2020-07-20T07:28:22Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.