**This step-by-step guide will show you how to recover your account and your reputation after getting hacked.** ![broken-business-2237920_1920.jpg](https://steemitimages.com/DQmSUVsJ2J5LByXZajvhZ9Pz8ogrRKfxHHQQTeU6tmxm1a9/broken-business-2237920_1920.jpg) ## It Can Happen To Everyone If you’ve been following my blog, you probably know I got hacked last week. If you haven’t read my post/ warning yet, please head over to: ‘**[The Most Important Thing I've Learned From Getting HACKED!!](https://steemit.com/mapsters/@simplymike/the-most-important-thing-i-ve-learned-from-getting-hacked)**. Unfortunately, the phishing scam is still going on, and people are still falling victim to the hackers.
![divider.png](https://steemitimages.com/DQmWxB2syjD1Qf3ZLjydK1RnjRQAAcdoR87LK3CtpaH4EvK/divider.png) ## What’s Going On? In case you haven’t heard the news yet: hackers are compromising accounts by sending out phishing messages with a fake link.

https://steemitimages.com/DQmVHvidLBPD8C49QWPA8RbMMeemCBwwmKGkiLzhN6rzqro/road-sign-464653_640.jpg

The phishing messages take many forms. When you click the link inside, you’re taken to a fake website (like for example steemil.com or steewitt.com) which resembles SteemIt. You’re then asked to log into your account. Once you do, the hackers have access to your credentials. Once the hackers can access your account, they use it to send out their phishing message to others, trying to get more people to click their fake link. When you’ve exposed just your private posting key, that’s all they can do and your money is safe. However, if you’ve exposed your private active key - or even worse: your master password - the hackers will withdraw your SBD and initiate the power down of your SP.
![divider.png](https://steemitimages.com/DQmWxB2syjD1Qf3ZLjydK1RnjRQAAcdoR87LK3CtpaH4EvK/divider.png) ## Protection Measures Once the phishing comments that were sent out from your account are detected, the people over at @steemcleaners will start flagging them. When a comment has been flagged, it is hidden from the public. This way, the risk for others to click one of the phishing links is reduced to almost zero. ![flagged.png](https://steemitimages.com/DQmTQk4TNnospNytdPdR8GLoaA99nrhEhE3NVRhYA6i3tcd/flagged.png) The downside of this is that your reputation score will go down to -1.
![divider.png](https://steemitimages.com/DQmWxB2syjD1Qf3ZLjydK1RnjRQAAcdoR87LK3CtpaH4EvK/divider.png) ## Don’t Go Around Blaming People

https://steemitimages.com/DQmciBznz6VMgtWdEZmSFsvjBXbgUQpjDkFCcM8ywWENt8L/index-315754_640.jpg

I’ve seen several posts in which people are pointing their finger at the owner of the account that was used to post the phishing message. **Please don’t do this**. The account has been hacked, just like yours. It’s the hackers that are sending out the phishing messages. The only thing you can blame the owner of is of being stupid enough to get his account hacked. By blaming the owner, you’re increasing the damage that has already been done.
![divider.png](https://steemitimages.com/DQmWxB2syjD1Qf3ZLjydK1RnjRQAAcdoR87LK3CtpaH4EvK/divider.png) ## What To Do When Your Account Has Been Hacked I’ve noticed quite some people have abandoned their hacked account and created a new one, or still have their reputation score at -1. As you can see, I recovered my account and got my reputation score back up, so it is possible to get out of this with just little damage. **Below, you can find the steps to take to get everything back to normal.** ![source (1).gif](https://steemitimages.com/DQmTWq1G4LMBzpihKAGe3Ba5XeYkpTifrCZ68xE36xXrLJW/source%20(1).gif) ### 1. Start the account recovery process. How to do this depends on how you’ve created your SteemIt account. * If you’ve created your account **through the SteemIt website itself**, you need to initiate the account recovery process by clicking the ‘[Stolen Accounts Recovery](https://steemit.com/recover_account_step_1)’ link in the menu you can open by clicking the menu item at the top right of your screen.
You’ll have to enter your account name and your password before you can click the ‘Begin Recovery’ button. Then, you’ll have to enter the email address associated with your SteemIt account. Once you’ve done that, you’ll have to be patient, because it can take up to 24 hours for the confirmation email to arrive.
Once you’ve received it, simply follow the instructions given. * If you’ve created your account through **[Blocktrades](https://blocktrades.us/)**, you’ll need to send an email to the [Blocktrades support service](mailto:support@blocktrades.us). Someone from @blocktrades will then contact you. You’ll be asked to confirm your Blocktrades email address and you’ll need to send your password. They will then start the recovery process. * In case your account has been created through **[AnonSteem](https://anon.steem.network/)**, you’ll have to follow the guidelines for their ‘Stolen Account Recovery’ process, which have been outlined **[here](https://anon.steem.network/recovery)**.
### 2. Editing the comments ![red flags.gif](https://steemitimages.com/DQmV9mntMtQ9AqfarbHZdKtfz5rpggzbXGhzVDNX4uXw6LT/red%20flags.gif) Once you are back in control of your account, you need to make sure the flags will be removed. @steemcleaners will do this for you, providing you edit every single phishing comment that has been posted from your account so it will become harmless. This will take some work and time, but if it can help you to get your reputation score back up, it’s definitely worth it.
To get started, go to https://steemworld.org/@yourusername. *(Change ‘yourusername’ to your actual username)* Scroll down to ‘*account operations*’ and find the spam comments that have been posted from your account. [![comments.png](https://steemitimages.com/DQmSMrHtMpQkXPwkbzic7Fs6svYzFCJJc94RK7BkCF8HdrB/comments.png)](https://steemitimages.com/DQmSMrHtMpQkXPwkbzic7Fs6svYzFCJJc94RK7BkCF8HdrB/comments.png) ^{Click to enlarge} Click them to reveal more info. Then, click the permalink. [![comment detail.png](https://steemitimages.com/DQmVWWgS1WNP5aHioES4f5upRYXEpzeNnBsoJ5UKFTToVcM/comment%20detail.png)](https://steemitimages.com/DQmVWWgS1WNP5aHioES4f5upRYXEpzeNnBsoJ5UKFTToVcM/comment%20detail.png) ^{Click to enlarge} This will bring you directly to the comment that was posted. From here, you should be able to edit the comment. Replace the existing text with ‘comment deleted’ [![edit comment.png](https://steemitimages.com/DQmfFW1ciaWNoUwcjbLphB99DHzYW3NrGk7ez7a3qi4TKNz/edit%20comment.png)](https://steemitimages.com/DQmfFW1ciaWNoUwcjbLphB99DHzYW3NrGk7ez7a3qi4TKNz/edit%20comment.png) ^{Click to enlarge} Save your changes. You should do this for EVERY SINGLE PHISHING COMMENT. *(I told you it would take some work...)*
### 3. Get the flags removed Once you’ve edited all comments, visit the **[Steemcleaners Discord channel](https://discord.gg/aVJ5cGy)** and tell them you’ve edited all the comments. Be patient, it can take a while before someone is available to help you out. Someone from @steemcleaners will then remove the flags so you can get back your reputation score. If you’ve received flags from others, contact these people, explain the situation, tell them the comment has been edited to make it harmless and ask them to take away the flag. That should do it. When your account and reputation score are back up, you can decide whether or not you send all the people who got commented on a short comment with your apologies. ![giphy (7).gif](https://steemitimages.com/DQmQYzSjmpDs725b4KyJLFLYcC2sApWjEoLByEuCA89pqdy/giphy%20(7).gif) This may sound like another truckload of work, but by doing this you can clear your name entirely. I do recommend it, but it’s totally up to you.
![divider.png](https://steemitimages.com/DQmWxB2syjD1Qf3ZLjydK1RnjRQAAcdoR87LK3CtpaH4EvK/divider.png) ## How To Prevent This From Happening Again It’s a shame it took such a drastic event for me to learn a couple of important things concerning account security. First of all: ### Never use your master password for daily logins. As I’ve stated in my [other post](https://steemit.com/mapsters/@simplymike/the-most-important-thing-i-ve-learned-from-getting-hacked): [![faq.png](https://steemitimages.com/DQmaUjr71sBV5sbyEXNrrY6soY5Xa675e2Gdj8wwU8Uv8qo/faq.png)](https://steemit.com/faq.html#How_can_I_keep_my_Steem_account_secure) Next: ### Always triple-check the URL to see that you’re actually on SteemIt before you enter your credentials. Better be safe than sorry! ![shamebox.gif](https://steemitimages.com/DQmZGqGKNy5SArH9oHFE7EeSDggopTYtWEA5EoRXeFQpBEr/shamebox.gif) ## More Info Below, you’ll find the links to some other posts about this situation. [Beware of Clicking Links in Phishing Comments Pointing to STEEMIL.COM](https://steemit.com/scam/@drakos/beware-of-clicking-links-in-phishing-comments-pointing-to-steemil-com) by @drakos [Public Service Announcement (PSA) - FAKE SITE: STEEMIL - PHISHING ATTACK ! ! ! BEWARE ! ! !](https://steemit.com/phishing/@goldkey/public-service-announcement-psa-fake-site-steemil-phishing-attack-beware) by @goldkey [Scam Alert #2 - I was Scammed 663.843 SBD - Update For You - Enjoy with Troy!](https://steemit.com/steemitabuse/@enjoywithtroy/scam-alert-2-i-was-scammed-663-843-sbd-update-and-story-enjoy-with-troy) by @enjoywithtroy [Phishing Scam Warning !](https://steemit.com/steemit/@arunava/phishing-scam-warning) by @arunava Please take the necessary precautions so your account will be secure. If you know someone who has been hacked, feel free to refer to this guide. --- [![signature2.gif](https://res.cloudinary.com/hpiynhbhq/image/upload/v1518894855/qd1teveurcpmlnmxf1so.gif)](https://steemit.com/@simplymike) **[Subscribe Ro RSS Feed](http://feeds.feedburner.com/SimplymikeOnSteemIt)** | **[Subscribe To Newsletter](http://eepurl.com/dfsTh1)**
### More Posts You Might Like
**[Airdrop: Farmville for crypto](http://ref.bits.farm/?code=MzEzMjk=)** *This is an affiliate link. I will receive free SEED if you join this airdrop through the link above.* **[🏆 [CHALLENGE] What Did You Learn About SteemIt Today? (@steembasicincome Giveaway)](https://steemit.com/mapsters/@simplymike/challenge-what-did-you-learn-about-steemit-today-steembasicincome-giveaway)** **[The Most Important Thing I've Learned From Getting HACKED!!](https://steemit.com/mapsters/@simplymike/the-most-important-thing-i-ve-learned-from-getting-hacked)** **[FIGHTING THE GOOD FIGHT ~ HOW YOU CAN DO YOUR PART IN THE BATTLE AGAINST REWARD POOL ABUSE](https://steemit.com/stewardsofgondor/@terminallyill/fighting-the-good-fight-how-you-can-do-your-part-in-the-battle-against-reward-pool-abuse)** **[I'll Show You The One Thing You Need To Do To Never get Bitten By Cheetah Again!](https://steemit.com/busy/@simplymike/i-ll-show-you-the-one-thing-you-need-to-do-to-never-get-bitten-by-cheetah-again)** [![fight_spam.jpg](https://s19.postimg.org/z1eyk9v1f/fight_spam.jpg)](https://postimg.org/image/pgvbxe5pb/)
*Image Sources:* *[Pixabay](https://pixabay.com)* *[Giphy](https://giphy.com)* *Screenshots taken from [Steemworld.org](https://steemworld.org)*