Back to Cookbook

Account Security Response

Freeze first, sort later

A brokerage-account incident response checklist for suspicious access, account takeover concerns, and evidence capture when something looks wrong.

CommunitySubmitted by CommunityPersonal3 min

INGREDIENTS

✉️Email🔔Notifications

PROMPT

Create a skill called "Account Security Response". When I suspect a brokerage-account security issue, give me a step-by-step incident response checklist with: - immediate actions to stop the damage, - evidence to capture before changing anything, - recovery steps, - and post-incident hardening tasks.

How It Works

This recipe is for suspected hacks, suspicious account activity, or access

concerns.

Triggers

  • Suspicious login or unrecognized device
  • Unrecognized trades or transfers
  • Security alert from broker
  • Lost account access after a scare

Inputs

  • Broker
  • Symptoms observed
  • Whether account access is still available
  • Contact channels

Outputs

  • Immediate action checklist
  • Evidence capture list
  • Recovery sequence
  • Security hardening checklist

Steps / Actions

  1. Stop the blast radius (freeze, lock, restrict).
  2. Capture evidence before changing anything.
  3. Contact the broker through the fastest safe path.
  4. Reset credentials and harden security.
  5. Log recovery steps for follow-up.

Failure Modes

  • User delays action while investigating on their own
  • User changes credentials before documenting the evidence
Tags:#security#account#incident-response#brokerage