What to Do If Your Etsy Account Is Hacked: A Step-by-Step Guide

Discovering that your Etsy account has been hacked can be unsettling, especially when it impacts your business. Whether it's unauthorized listings, missing funds, or a locked account, the most important thing is to regain control and secure your account.

Recognize the Signs of a Hack Early

Early detection can save you from bigger problems. Here are some signs that your Etsy account might be compromised:

• Login alerts from unknown devices.
• Unusual account activity, like changes in your store's traffic or orders.
• Emails from Etsy about listings being deactivated or account changes you didn't make.
• Unexpected messages or transactions.

Related: Protect Your Etsy Shop from Scammers: Tips for Sellers

Real-life stories

Story 1:

I started my digital printables shop , PrintableForPlanners 3 years ago. On Sep 10th I suddenly wasn't able to log back into my shop. I quickly found out that my email address to my Etsy shop had been deleted and didn't exist anymore. Later, I was able to log back in again with the same email address, but I couldn't access my shop anymore. My account was swapped with someone else's account named "Mary".

Read her story, here.

Story 2

My Etsy account was hacked and stolen along with the email account I was using for Etsy. Is there anything I can do to help recover my shop? 

My Etsy shop, ChuckButtons was hacked and stolen around 16:20 pm on the 17th of May 2023 (UK time). I was logged in at the time and using Etsy to work on active orders. Then, all of a sudden, I was logged out, and my usual email and password weren't working. I quickly opened Mail dot com, the email service I use to see what was happening, but that didn't let me log in either. I immediately realized that I had been hacked and someone was trying to steal all of my online accounts. Thankfully, I use multiple emails, so things like my PayPal account are safe. However, I don't have a mobile phone, so I wasn't using any kind of verification thing, so my account was easily taken. I feel like a total fool.

Source: reddit.com

How Hackers Gain Access to Your Details

Hackers often target your email account as the gateway to other platforms, including Etsy. Here's how they might gain access:

• Phishing Emails: Fake emails trick you into entering your login details on a fake website that looks like Etsy or your email provider.
• Data Breaches: If another service you use has been breached, hackers might try those same login details on your Etsy account.
• Social Engineering: Hackers may impersonate Etsy Support or another trusted entity to trick you into sharing sensitive information.
• Weak Passwords: Reusing passwords or using simple ones makes it easier for hackers to guess or crack your login credentials. 

Related: How to Check If Your Business Is Affected by a Breach (And What to Do if It Is)

What to do if it happens to you

Hacks can happen to anyone, and what matters is how quickly you respond. Here are the steps to take back control and protect your business.

1. Reset Your Password

If you can log in:

• Immediately change your password to a strong, unique one. Use a password manager to generate and store it securely.
• Avoid reusing passwords from other accounts.

If you're locked out:

• Use Etsy's Forgot Your Password? feature to reset it.
• If hackers changed your email address, contact Etsy Support for assistance.

2. Enable Two-Factor Authentication (2FA)

Add an extra layer of security by turning on 2FA. This ensures that even if someone gets your password, they can't access your account without a verification code.

3. Check for Suspicious Activity

Review your account thoroughly to identify the extent of the breach:

• Look for unauthorized listings, messages, or transactions.
• Check if your email or password has been changed.
• Screenshot any suspicious activity for your records.

4. Contact Etsy Support

Reach out to Etsy's support team to report the hack. Provide:

• Screenshots and descriptions of the suspicious activity.
• A clear timeline of what happened.
• Any requested documentation to verify your identity.

Etsy prioritizes hacked accounts, so don't hesitate to escalate your case if needed.

5. Review Your Payment and Bank Details

Hackers often target financial settings. Verify that:

• Your bank and PayPal details are correct.
• There are no unauthorized payouts or withdrawal attempts.

If you find discrepancies, alert Etsy and your bank immediately.

6. Notify Affected Customers

If hackers contacted your customers or processed fake transactions, reach out to them:

• Apologize for any inconvenience.
• Assure them that you're working on resolving the issue.
• Use a pre-written template to save time and maintain professionalism.

7. Scan for Malware and Phishing

The hack might be linked to malicious software or phishing. To prevent future incidents:

• Run a comprehensive antivirus scan on your devices.
• Check for phishing emails or fake Etsy messages you might have interacted with.
• Be cautious with links in emails moving forward.

8. Monitor Your Account and Linked Accounts

For several weeks, keep a close eye on your Etsy account and any linked accounts, like email and payment services. Watch for:

• Login attempts from unfamiliar locations.
• Unusual transactions.
• Emails about unexpected account changes.

9.  Prevent Future Hacks

Once your account is secure, take steps to strengthen its protection:

• Regularly update your passwords and store them in a secure password manager.
• Review and remove unnecessary third-party integrations.
• Enable activity alerts to get notified of any unusual login attempts.

For added peace of mind, consider using a solution like Bitdefender Ultimate Small Business Security to protect your email, socials and accounts from future attacks.

What To Do If Your Etsy Shop is Hacked - Quick Reference Checklist.

Here's a handy summary of the steps:

1. Recognize the signs of a hack.
2. Stay calm and gather information.
3. Reset your password.
4. Enable 2FA.
5. Contact Etsy Support.
6. Verify payment and bank details.
7. Notify affected customers.
8. Scan devices for malware.
9. Monitor your account for several weeks.
10. Take proactive steps to prevent future hacks.

FAQs

How did my Etsy account get hacked?

Your Etsy account may have been hacked due to various reasons, such as:

• Phishing emails: You may have unknowingly clicked on a fake link or entered your login credentials on a fraudulent website designed to look like Etsy.
• Weak passwords: If your password is easy to guess or reused across multiple accounts, hackers could crack it using automated tools.
• Data breaches: If another service you use has been breached, hackers might use the stolen credentials to access your Etsy account.
• Compromised email account: If hackers gain access to your email, they can reset passwords for linked accounts like Etsy.
• Unsecured devices: Malware or spyware on your device can capture login credentials or other sensitive information.

Should I delete an account if it was hacked?

Not necessarily. Deleting your account might seem like a quick fix, but it's better to regain control and secure it:

• Reset your password immediately.
• Enable two-factor authentication (2FA).
• Review your account activity and update your security settings.
• Notify Etsy Support about the hack and request assistance.

Only consider deleting the account if you no longer need it and have resolved all security issues, as keeping it might be necessary for business continuity or maintaining customer relationships.

What is the first thing you do when you get hacked?

The first thing you should do is regain control of your account:

1. Reset your password to a strong, unique one.
2. Check your account activity for suspicious changes, like unauthorized transactions or altered settings.
3. Contact Etsy Support to report the hack and get assistance.

Secure your email account and enable 2FA on all linked accounts to prevent further unauthorized access.