A hacked Best Buy account can expose saved payment methods, order history, rewards points, addresses, and possibly a linked Best Buy credit card. Move quickly if you see orders you did not place or your password suddenly stops working.
Does this affect you?
Use this for BestBuy.com, the Best Buy app, My Best Buy Membership, rewards points, and Best Buy credit card accounts linked to your profile.
Lock the account down
Start here even if you have not found a fraudulent order yet.
- If you can still sign in, open Login & Security, Profile, or account security settings and change the password immediately.
- Use a unique password that you do not use on any other website.
- Update security questions if Best Buy prompts for them, because attackers may change recovery details to keep access later.
- Check that the email address and phone number on the account still belong to you.
- If the password no longer works, use Forgot Password from the sign-in page.
- If the reset email or phone number has been changed, contact Best Buy support to verify ownership another way.
Check for and report fraud
After you regain control, inspect everything tied to purchases.
- Review recent Order History for items you did not buy.
- Check whether My Best Buy points were used or transferred unexpectedly.
- If a Best Buy credit card is linked, call the number on the card or Citibank customer service to report suspicious activity and ask whether the card should be replaced.
- Monitor bank and card statements for several weeks in case small test charges appear.
- Pull your free credit report and consider a credit freeze if personal information may have been exposed.
More control
Turn on 2-Step Verification
Best Buy offers 2-Step Verification so a new-device sign-in requires a code in addition to the password. Enable it in account security settings after you regain access.
Call official support
Call 1-888-BEST BUY (1-888-237-8289) if you believe the account was compromised or you cannot recover it online. Be ready to confirm identity with order details, billing information, address, or card information.
Change reused passwords elsewhere
If the Best Buy password was used on another account, change it there too. Attackers often try leaked passwords across many shopping and email sites.
Sources
- Best Buy – Protecting online accounts (2025)
- Best Buy – 2-Step Verification (2025)
- Best Buy Customer Support – 1-888-BEST BUY (2025)