The immediate action is to block any action that could be possible from that account. If it’s making payments, you should freeze your cards. If it’s messaging relatives, you should tell them in advance that they might receive phishing messages.In order to recover your account, you should contact the company as soon as possible and let them know what happened.