Review paid accounts after a security incident

Review checklist

1. Secure the primary email and payment accounts before changing individual service settings. Record the source and review date so another person can reproduce the decision.
2. Review provider sessions, recovery methods, plan changes and recent invoices without sharing authentication codes. Keep uncertain items as candidates until the account owner confirms the billing relationship.
3. Report unauthorized activity through official support and retain only the minimum evidence needed for follow-up. Preserve a dated confirmation or export before changing an account, plan or renewal setting.

Scope

General guidance for reviewing your own subscriptions. Act only as the account owner or an authorized administrator.

Before you act

Do not publish raw email, full card numbers, passwords or verification codes, including in support messages. Exporting data, disconnecting an account and deleting server data are different actions.

Related official guidance

The official references below describe the named platforms. They do not guarantee prices or procedures across all services; use the current account screen and billing terms.

• Google: protect your account

Draft date: 2026-09-04 · General guidance; human editorial review pending

Related reading

• Import card or bank tables without sharing account credentials
• Design automatic subscription discovery around minimum data
• Export and delete subscription data before leaving a service