Maybe: - Password manager compromised - Personal details - mobile, email, flagged with third party fraud checker - IP flagged (access via vpn, same network something happening)