Write down what changed
Record the message, unfamiliar account activity or device behavior that prompted your concern. Battery drain or a slow app alone does not identify a specific compromise; useful context is more precise than a checklist score.
Review accounts and device settings
Use the device maker and account provider’s own support tools. Check for unfamiliar sessions and follow official recovery steps where necessary. Keep account recovery codes and passwords out of third-party diagnostic forms.
Escalate through a trusted channel
If the concern involves your phone number or service, contact the carrier through a known route. If it is a work-managed device, involve your administrator before making changes that could affect their investigation.