Open account security from the normal Console address rather than following a suspicious message. Review active sessions and revoke a session you do not recognize. If needed, log out other sessions while retaining your current authorized device.
Also review sign-in connections and any integration credentials that might have been exposed. Keep a redacted record of the alert's time and description for support. Do not forward a live sign-in link, recovery code, or full credential. For a suspected security exposure, contact [email protected]. A session alert alone does not show that a WhatsApp number or every team key was compromised.