# Got Hacked Or Drained?

A short guide on what to do if you think your wallet was compromised, or you see that your funds have been drained, or are not there.

1. The first step is to check your Telegram settings by going to the bottom right "Settings" button, and clicking "Devices"

<figure><img src="/files/EdA3RT7TKIHrKgBdGuZr" alt=""><figcaption></figcaption></figure>

2. Check for any unrecognized sessions from locations you don't know, and click "Terminate all other sessions"
3. Go back to settings and click "Privacy and Security", turn ON "Two-Step Verification" and "Passcode & Face ID"
4. Next go back to your hacked Sanji Bot and check if any SOL, or tokens are left. If you want to recover any funds that are still there, you will have to click "Wallet", and then "Show Private Key", copy and paste your private key into Phantom wallet under the "Import a wallet" option. You will then be able to SEND your tokens to another wallet that is NOT compromised.
5. Remember: They have your private key. Any funds you add into that Sanji Bot account WILL be stolen, the wallet is not safe!
6. Next, click "Wallet" again inside your Sanji Bot, and DELETE the wallet once you've beefed up your security inside Telegram.
7. Next, run the /start command again to start a fresh Sanji Bot wallet. (The scammer does not have this private key, unless they're still in your account.
8. Next, click "Settings" inside Sanji Bot, and click "Security", and then click to enable 2FA.
9. Use google authenticator app, microsoft authenticator app, or your favorite auth app to setup a 2FA code on private key reveals.&#x20;

Follow the tutorials below:

{% content-ref url="/pages/PmQBLAnJOYjAd8ldZNQ1" %}
[2 Factor Authentication](/safety/2-factor-authentication.md)
{% endcontent-ref %}

{% content-ref url="/pages/EPpxAR0n1XV6ApiKYYXb" %}
[Safety Tips & Warnings](/safety/safety-tips-and-warnings.md)
{% endcontent-ref %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.sanjibot.io/got-hacked-or-drained.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.