@alice If you entered your password, open your instance’s site directly rather than following the DM. Change the password, review active sessions and authorized apps, and enable 2FA. Report the fake account so your instance’s moderators can act.