Objective
If Twilio has detected suspicious activity and locked your account, this article helps you open the Account Activity Review page and read through what was detected, so you can judge whether someone else has been using your account.
Product
Twilio Console
Environment
Twilio Console
Procedure
- Sign in to the Twilio Console. When your account has been locked for suspicious activity, the account status area at the top of the page shows a Suspended badge.
- Select the Suspended badge to open the account status panel. It shows the heading Your account has been compromised.
- Select Recover account. The Account Activity Review page opens.
- Read the alert at the top of the page. It confirms that your account has been locked as a precaution and, when available, shows the date and time the account restriction began.
- Under Recent IP address usage, review the list of IP addresses recently seen on your account. Each card shows the IP address and the location it was used from. If Twilio has no IP data to show, the page displays No IP details available.
- Under Other recommended places to investigate, open each area to check for activity you do not recognize:
- Billing overview, check for unexpected billing activity.
- Phone numbers inventory, check for phone numbers you did not buy.
- Message logs, check for message traffic you did not send.
- Voice Logs, check for calls you did not make.
- Based on what you find, either start the account recovery process or tell Twilio your account looks secure.
Additional Information
- If your account has 10DLC campaigns, those are suspended along with the account.
- The location shown on an IP address card appears as Unknown when Twilio cannot determine the country.
This content was generated by AI and reviewed, edited, and verified by a human.