Your friends are texting you about strange messages they got from your account, you spotted a login alert from a country you have never visited, or your usual password suddenly stops working at the sign-in screen. Maybe you opened the app to find an unrequested driver contact, an email or payment change you never made, or a charge you do not recognize. It is an unsettling feeling, but an Uber account is recoverable in most cases, and the steps below are ordered so the fastest, highest-success actions come first.
One rule before you start: do everything from a device, browser, and network you have signed in from before. Familiar hardware and a known connection make Uber's identity checks pass more smoothly, and they keep you off any fake page a phishing message may have steered you toward. Never create a brand-new account to report the hacked one, and confirm you are on a genuine Uber domain (accounts.uber.com, account.uber.com, or auth.uber.com) before you type a password or upload anything.
Confirm the Compromise and Change Your Password Right Away
If you can still get into the app, act before the intruder locks you out. Uber's first instruction on its account-compromise help page, when you notice suspicious activity such as unrequested driver contact, unauthorized email, password, or payment changes, or unknown charges, is to change your password immediately.
You can start the change from the in-app Help menu under the sign-in help options, or go straight to the password reset page. Do not delay this step to investigate the charges first; cutting off the attacker's access is what matters most in the first few minutes.
Reset Your Password Within the 10-Minute Window
To reset, open the official forgot-password page at auth.uber.com/login/forgot-password, or tap "I forgot my password" inside the app. Select "Request a link to reset your password" and enter the email on the account.
Uber emails you a reset link that expires after 10 minutes. If it lapses before you use it, simply request a new one and act faster the second time. Choose a password you do not reuse anywhere else, and remember that Uber's customer support will never ask you for your password, so anyone who does is not Uber.
Because Uber runs one account across rider, Uber Eats, and driver under accounts.uber.com and account.uber.com, this single reset secures all of those services at once. There is no separate parent-company account to worry about.
Locked Out and Cannot Sign In
If the attacker already changed your details and you cannot get in, switch to the recovery flow. Start on Uber's account sign-in help page and work through its checklist in order:
- 1.Update the Uber app to the latest version.
- 2.Try signing in on the web or on another device you have used before.
- 3.Restart your phone.
- 4.Check your internet connection.
- 5.Confirm the app's permissions are enabled.
If none of that gets you in, complete the support form on that same page. It asks for your name, the email on the account, the phone number on the account, a screenshot of the error, your last two trips or orders, and the last four digits of your payment card. Those details are how Uber confirms the account is really yours, so have them ready.
After you submit, Uber sends an automated message asking you to confirm it is really you. Open that message and choose "Confirm email address" to be connected with a support agent. Throughout this process, never hand a verification code, password, or two-factor code to anyone who contacts you; genuine support does not need it, and a request for it is the clearest sign of a scam.
Report the Hacked Account Under the Right Category
Uber's hacked or stolen account help page routes you to pick the issue that matches your situation. The options include being charged twice or a different amount than your receipt, an unrecognized charge, can't sign in, forgot password, can't update phone number or email, or a different payment issue.
Choosing the closest match matters, because each option leads to a page with more detail and, where it applies, an option to contact Uber's team directly. Picking the wrong category can send you down a path that does not offer the help you actually need.
Review and Report Charges You Do Not Recognize
If money left your account, Uber's unrecognized-charge help page walks you through a few checks before you report. First, see whether the charge is a temporary authorization hold, which is automatically canceled once the trip charge is fully covered. Next, consider whether a friend or family member used your account or payment information. Then look through your trip and order history, since the amount may be an updated fare, a cancellation fee, or a tip.
If you still do not recognize the charge, Uber says: "If you still don't recognize the charge, you can share the details on this page. We'll review it and get back to you." For anything you believe is genuinely unauthorized, also contact your bank or card issuer directly so they can act on the fraud from their side while Uber reviews it from theirs.
Lock It Down With 2-Step Verification and Backup Codes
Once you are back in, the goal is making sure the attacker cannot simply walk back in. Turn on 2-step verification so a stolen password is no longer enough on its own.
- 1.Open the Uber app and go to your account management.
- 2.Select Security.
- 3.Choose 2-step verification and follow the prompts.
You can receive codes by SMS from Uber or through a security app. Uber lists Duo, Authy, and Google Authenticator, and these apps work offline, which is handy when your signal is weak. An authenticator app is generally sturdier than SMS, so prefer it if you can.
After setup, Uber prompts you to save backup codes, and you should. As the official Turn on 2-step verification page puts it: "If you lose your phone and need to access your account, these codes will help you sign in to your Uber account." Store them somewhere safe and offline. Each backup code is single-use, so cross one off once you use it.
If a code never arrives later on, Uber's troubleshooting guidance tells you to tap "I didn't receive a code" and then choose "Resend code via SMS" or "Call me with Code." You can also fall back on a backup code or a security app, and if all of that fails, return to the account sign-in help flow to reach support. Keep in mind that even without 2-step verification enabled, Uber may present a security challenge for sensitive actions such as downloading your data or deleting the account.
Harden the Account So It Stays Yours
Uber's account-protection help page lays out the habits that keep an account secure for the long run. Use a unique password that you do not reuse on any other service; Uber recommends at least 10 characters with upper and lowercase letters, numbers, and at least one symbol. A password manager makes that practical to maintain across all your logins.
Keep 2-step verification switched on, and stay alert to phishing. Uber states that its employees will never contact you by email or phone requesting your account information, including your password or financial information. Do not click unsolicited login links, and report suspicious messages rather than engaging with them.
One more guardrail worth repeating: do not pay any third-party "account recovery service" that promises to restore your access. Every legitimate step lives inside Uber's own help pages and costs nothing, and handing your credentials to an outside service is how people lose their accounts a second time.
Frequently Asked Questions
How long does Uber take to recover a hacked account?
Uber does not publish a timeline for account recovery, support response, or reset-link processing on its rider help pages. The fastest route is still to change your password yourself if you can sign in, and to complete the account sign-in support form promptly with all the requested details if you cannot.
Will resetting my password kick the hacker out of other sessions?
Uber's rider help pages do not state whether a password reset automatically signs out other devices or sessions. Reset your password right away regardless, then turn on 2-step verification so that even an active session cannot be used to sign in again without your second factor.
What if I lost my phone and all my backup codes?
Uber does not document a self-serve reset path for losing both your phone and all your backup codes. In that case, your route back in is to contact Uber support through the account sign-in help flow and complete its identity verification using the account details it asks for.
Does securing my rider account also protect Uber Eats and driver access?
Yes. Uber uses one account across its services under accounts.uber.com and account.uber.com, so there is no separate parent-company login. Resetting your password and enabling 2-step verification secures rider, Uber Eats, and driver access together.
Someone is asking me for my verification code to "help" recover my account. Is that safe?
No. Never share a verification code, password, or two-factor code with anyone, including someone claiming to be support. Uber states its employees will never request your account information, password, or financial information, so any such request is a scam.
Should I report the unauthorized charges to my bank too?
Yes. Report the charge to Uber through its unrecognized-charge help page, and separately contact your bank or card issuer directly about any charge you believe is unauthorized so they can act on the fraud from their end.
