TL;DR: Change your password, check for changed contact details, payout methods and orders, and contact support fast. eBay, Upwork and Fiverr may place a temporary hold; Shopify says payouts can be held without two-step authentication.

👉 Check my digital footprint — free 30-second check →

Seller and gig accounts hold payouts, bookings and reputations, so the damage from a takeover goes beyond one bad login. Here is what each platform says to do.

Amazon

Amazon's own help pages could not be retrieved for this guide. Use the FTC checklist in the hacked email guide: secure your email first, change the password, sign out of all devices, turn on two-step verification and review orders and saved payment methods.

eBay

If you can sign in, change your password immediately and verify your contact information, shipping addresses and payment details, and check active bids and listings. eBay lists a changed password or contact info, and bids, offers, purchases or listings you did not make, as warning signs. It may place a temporary hold on the account. It also advises changing your personal email password separately, contacting your card company and bank about fraudulent charges, and filing a police report if the account was used without authorisation.

Etsy

Change your password under Account settings, and turn on two-factor authentication under Security. If your email was changed, follow the instructions in the message sent to the original address. If you cannot access the account, contact Etsy Support. Unexpected orders can be checked at etsy.com/your/purchases; Etsy notes some orders may take longer than the standard 72 hours to process.

Shopify

Shopify says to contact Shopify Support immediately. Signs it lists are unrecognised logins, unauthorised changes to your email or two-factor settings, unfamiliar staff accounts and changed payment details. It names passkeys and two-step authentication as protections, and says payouts might be placed on hold without two-step authentication. If you lose email access as owner, use the recovery flow at accounts.shopify.com. Password reset links are valid for 48 hours, and five failed attempts can lock you out for 30 minutes.

Fiverr

On suspicious activity Fiverr logs you out of all devices and requires a password reset. After recovery, enable 2FA, review connected devices and remove any you do not recognise. 2FA codes can arrive by email, SMS, WhatsApp or a notification on a logged-in device. If you cannot reach your registered email, contact support: freelancers verify ownership using the Payoneer ID or PayPal email used for withdrawals. Fiverr says a lockout after failed attempts lasts 24 hours and restricted accounts can withdraw funds after 90 days.

Upwork

Contact Upwork Support as soon as possible through its ticket form with your name, user ID and an explanation, and change your password and security question immediately. If you cannot log in, Upwork says it is most likely because it placed a hold on the account, a temporary protective measure against further fraud.

Airbnb

Go to the Review your account page, change your password and review recent logins by time, browser and location. Check that your contact info, profile photos, listings and payout methods are unchanged and that you made every reservation. Airbnb says it will help you understand what changes were made and how to undo them.

Uber

Uber's driver and delivery help page says to reset your password if you can still sign in. If you cannot access the account, provide contact information to support; it asks for a mobile number for locked accounts. Signs it lists are account changes you did not make, unrecognised receipts, unauthorised payment changes and credential updates you did not make. The Rider and Uber Eats versions could not be retrieved.

After recovery

Check that the payout account is still yours, and watch for scams that follow. See the marketplace scam rules guide and how to cancel a compromised card.

Hackers often get in with a password that already leaked in an old breach. A free digital footprint check shows whether your email or number appears in exposed data.

Frequently Asked Questions

Will a platform lock my account after a takeover?

It can. eBay may place a temporary hold, and Upwork says a hold is the most likely reason you cannot log in. Both describe it as protective.

Can a hacked Shopify store have payouts held?

Shopify says payouts might be placed on hold without two-step authentication.

How does Fiverr verify freelancer ownership?

Freelancers verify with the Payoneer ID or PayPal email used for withdrawals. Clients give the first six and last four digits of their card.

What should I check on Airbnb?

Recent logins, contact info, profile photos, listings, payout methods and that you made every reservation.

What if my Amazon account is hacked?

Secure your email first, change the password, sign out of all devices and turn on two-step verification. Amazon's own pages were not retrievable for this guide.

Sources

Related Reading