The Federal Trade Commission has some recommendations: https://www.consumer.ftc.gov/articles/how-spot-avoid-and-report-tech-support-scams
Many sites have experienced breaches where passwords have been compromised. Use this link to see if yours is one of them. https://haveibeenpwned.com/