The short answer
Go to facebook.com/hacked or instagram.com/hacked from a device you've used before and follow the steps. Once you're back in, change your password, turn on two-factor authentication, remove unknown devices and apps, and check your email and phone number. Never pay anyone who offers to recover your account.
A hacked social media account isn’t just embarrassing. Criminals use them to message your friends asking for money, promote crypto scams, or sell the account on. The good news: Meta has dedicated recovery pages, and acting quickly improves your chances.
Signs your account was hacked
- You can’t sign in, or your password has changed.
- Your email or phone number on the account changed.
- Posts, stories or messages you didn’t send, often about crypto, giveaways or urgent money requests.
- Emails from Meta about new logins or changes you didn’t make.
Step 1: Use the official recovery page
From a phone or computer you’ve used to sign in before:
- Facebook: go to facebook.com/hacked.
- Instagram: go to instagram.com/hacked, or tap “Forgot password?” on the login screen and follow the “Need more help?” options.
Type these addresses yourself. Don’t use links from messages, and don’t call “support” numbers from search results.
Check your email for messages from Meta about a changed email address or password. They often include a link to reverse the change and secure your account. Make sure the email really came from Meta before you click.
If you’re asked to confirm your identity, follow the steps in the app. Instagram may ask for a short video selfie.
Step 2: Lock it down once you’re back in
- Change your password to a long, unique one. See how to create strong passwords.
- Turn on two-factor authentication in Meta’s Accounts Center, using an authenticator app if you can.
- Check “Where you’re logged in” and log out of any devices you don’t recognize.
- Check your email and phone number in Accounts Center and remove anything that isn’t yours.
- Remove unfamiliar apps and websites connected to your account.
- Review recent posts and messages and delete anything the hacker sent.
Step 3: Secure your email too
If the hacker got into your email first, they can take the account again. Follow our guide on what to do if your email is hacked.
Step 4: Warn your friends
Post (or ask a friend to post) that your account was hacked, and tell people not to send money or click links from messages that came from you.
Beware of “recovery” scammers
After you post about a hack, you’ll often get comments and messages from accounts claiming they can recover it, sometimes calling themselves “hackers” or “Meta agents.” They’re scammers. Meta doesn’t charge for account recovery.
How to prevent the next hack
- Turn on two-factor authentication and save your backup codes.
- Use a unique password stored in a password manager.
- Be wary of messages saying your page will be deleted or that you violated copyright. They’re a common phishing trick to steal logins.
- Don’t log in through links in messages; open the app instead.
Related guides
Using the same password elsewhere? Create strong, unique passwords and store them in a password manager.
The bottom line
Use facebook.com/hacked or instagram.com/hacked, secure the account with a new password and two-factor authentication, and ignore anyone who offers paid recovery. Then secure your email so it doesn’t happen again.
Frequently asked questions
Someone on social media says they can recover my account for a fee. Is that real?
No. People who comment or message offering to “recover” hacked accounts are scammers. Only use Meta's own recovery pages and in-app tools.
The hacker changed my email and phone number. Can I still recover it?
Often, yes. Meta usually emails the old address when contact details change, and that email may include a link to reverse the change. The official hacked-account pages also offer identity checks, sometimes including a video selfie.
My friend's account is messaging me asking for money. What should I do?
Don't send anything. Contact your friend another way, such as by phone, and tell them their account may be hacked. Report the account through Facebook or Instagram.
Why you can trust this guide
- Based on official sources. The steps here are checked against the 3 official sources listed below, such as the help pages of the companies involved.
- Checked and dated. Last checked on November 10, 2026. We update guides when software or advice changes.
- Independent. No company paid for or reviewed this guide. We don't sell products, and ads never influence our advice.
- Open to corrections. Spotted an error? Tell us and we'll fix it. Read how we research.
Sources
- Meta — Facebook: Recover a hacked account (facebook.com/hacked)
- Meta — Instagram: Recover a hacked account (instagram.com/hacked)
- Federal Trade Commission — How To Recover Your Hacked Email or Social Media Account
This guide is general information. Menus and features can change with software updates, and steps may differ on your device or version. Back up important data before making big changes. Read our disclaimer.
