I think my account was compromised — what should I do?

If you think someone else has gained access to your Paysavo account — an unrecognized login, a security-change notification you didn't trigger, or anything else that looks off — act quickly, since this is exactly the kind of situation Paysavo's account protections are designed around.

What to do right away

1. Reset your password immediately (see 'How to reset your Paysavo password'), even if you can still log in normally — this alone starts a 24-hour security hold on withdrawals and other sensitive actions, buying time even if the attacker was faster than you.
2. Check your device list on the device management page for any device you don't recognize, and revoke its trusted status or remove it (see 'Managing devices logged into your Paysavo account').
3. Contact Paysavo support immediately and explain the situation. Support has tools your own account settings don't give you — including revoking every trusted device at once, force-logging-out every active session, invalidating your existing 2FA recovery codes, and applying a temporary lock on high-risk actions — and can put these in place while the situation is investigated.

Why contact support rather than relying only on self-service

Some of the strongest lockdown actions — like forcing every session to log out at once, or invalidating all existing recovery codes — are handled by Paysavo's support/security team rather than being something you trigger yourself from the app. That's deliberate: it means a compromised account isn't solely in the hands of whoever currently has access to it.

Still need help? Contact Paysavo support.