I'm a student who created an AWS account for my college projects using my mom's PAN card since I didn't have mine at the time. After I launched a small EC2 instance, I went back to my hostel for a few days. When I returned, I discovered that the Gmail account I used to create my AWS got hacked, which means my AWS account is also compromised. The hacker has secured the Gmail account, and I can't get past the two-factor authentication to recover it. Additionally, when I try to log into AWS, I'm blocked by a multi-factor authentication set by someone else. I created a support case with AWS on March 20 but haven't heard back. What steps should I take now?
2 Answers
You might consider setting up a new email account and communicating with AWS support through that. Explain your situation and that your original email is compromised. They might have procedures for identity verification that could help you recover your account faster. No matter how frustrating, make sure to keep following up with them!
First, definitely cancel your credit card linked to the AWS account. If the hacker controls your account, they could rack up unexpected charges. Since you’ve already done that, your next move should be to keep trying AWS support. They might take time, but don’t lose hope. You can also check if there’s an option to report account takeover on their website. Stay persistent!
Good call on canceling the card! Keep an eye on your bank statements too since AWS charges might still show up until your account is fully secured.

Thanks for the tip! I’ll definitely try that and keep checking in for updates.