PURPOSE Suspicious login activity may indicate account compromise. WARNING SIGNS Unexpected MFA prompts, password reset emails you did not request, unfamiliar devices, strange login locations, locked accounts, or messages sent from your account. WHAT TO DO Change your password, review account sessions if available, and report the activity. DO NOT IGNORE Small signs can become larger incidents quickly. BEST PRACTICE Trust your instincts when account activity feels wrong.