In short
What should I do first if my account was hacked?
Check your email for messages from the platform about a changed email or password, since many include a link to reverse the change. Then use the platform's official hacked-account page. Don't pay anyone who contacts you offering to get it back.
Can I recover a hacked account if the email and phone were changed?
Often, yes. Platforms can verify you through old contact details, ID or a video selfie. Which route works depends on what the attacker changed, and that is what we work out in the free assessment.
What usually happens in a takeover
Most takeovers start with a phishing message: a fake copyright warning, a fake verification offer, or a message from a friend's hacked account. The attacker then changes the email, phone number and password, and often turns on their own two-factor authentication.
Speed matters. Hacked accounts are often used to scam your followers, or get reported until they are disabled, which turns a security case into a suspension case.
When we can help
- Your email, phone or password was changed without your consent.
- The attacker turned on two-factor authentication.
- The account was disabled after the takeover.
- Instagram, Facebook, TikTok, YouTube/Google and X accounts.
When we can't help
- You can't show you are the original owner.
- The account belongs to someone else. We never help access other people's accounts.
- The account was deleted and no longer exists.
How your case runs
- 01
Tell us what happened
Send the username, what the platform showed you and when it happened. Screenshots help.
- 02
Free assessment
We check which official route is still open and give you an honest view of your chances and the likely timeline.
- 03
Work begins with your approval
We prepare and submit everything through the platform's official channels and follow up on every response.
- 04
Result in writing
You get a clear summary of the outcome, including the platform's response where there is one.
What to have ready
- 1The username, plus the original email and phone number
- 2Any security emails from the platform about changes
- 3The approximate time the account was taken over
- 4A device you used to log in before, if you still have one
Your security
No step of our work needs your password or verification codes, and anyone who asks for them is not legitimate. Identity checks such as ID uploads or video selfies are always completed by you, on your own device. What you share with us is used only for your case and is never sold or passed on.
Frequently asked questions
The platform emailed me that my email was changed. What does that mean?
Many platforms send a message to the old address with a link to undo the change and secure the account. Use it, but first check that it really comes from the platform's official domain.
Should I pay the hacker?
No. Paying rarely gets the account back and marks you as someone who pays. Recover the account through the official routes instead.
How do I keep the account safe afterwards?
Use a new, unique password, turn on two-factor authentication with an authenticator app, remove unknown devices and apps, and update your recovery email and phone. You get a checklist at the end of every hacked-account case.
Guides for this situation
Instagram hacked and the email changed: what to do now
When someone takes over an Instagram account, they usually change the email and phone number first. Instagram has an official way to undo that, and speed matters.
Read the guideFacebook account hacked: how to get it back
Meta's own advice starts in one place: facebook.com/hacked, ideally on a phone or computer you've used to log in to Facebook before.
Read the guideHacked account checklist: the first hour
When someone takes over your account, the first hour decides a lot. Work through this checklist in order.
Read the guideForgot your Instagram password: how to reset it
If you can't remember your password, Instagram can send a login link to the email address or phone number on your account. It takes a minute when you still have access to one of them.
Read the guideInstagram two-factor code not arriving: what to do
Two-factor authentication asks for a code when someone logs in from a device Instagram doesn't recognize. If the code never arrives, there are still official ways back in, and one of them only works if you prepared it in advance.
Read the guideInstagram says your account is at risk: what it means
This warning usually means your password is weak or may have leaked somewhere else. It isn't a ban, but it is worth acting on straight away.
Read the guide
Official sources
The platforms' own help and policy pages. We are not affiliated with them.
Last updated: