The hacker turned on two-factor on your Instagram

Why it happens

Turning on two-factor is a common step for someone who takes over an account, because it blocks normal password resets.

What to try

1. On the login screen, tap 'Forgot password' and then 'Try another way'.
2. Choose the old email or phone if it is offered.
3. Go to instagram.com/hacked and pick the option that you can no longer access your email or phone.
4. Record the video selfie if Instagram asks.

If your face is not on the account

Brand and theme accounts have no face to match. Instagram may ask for other details. Keep screenshots of the account, the original sign-up email and any receipts from ads you ran.

Step 1: the route, in order

Work through the steps below in order. Skipping ahead usually costs time.

1. Take back the email account first. Change its password, sign out other sessions, and check forwarding rules.
2. Look for the change-alert email from the platform; many include a link to undo the change.
3. Use the platform's hacked page: instagram.com/hacked or facebook.com/hacked for Meta, Report a problem on TikTok, Snapchat Support's hacked form.
4. Secure business assets: remove unknown admins, partners and apps, and pause ads.
5. Tell friends and followers that recent messages may be fake. Call your bank about any charges.

Step 2: proof to gather

• Photos or videos of yourself, for a selfie check.
• The original email and phone on the account.
• Change-alert emails with dates.
• The device you normally use.
• Bank statements showing unknown charges.

Step 3: what to write

• Say what you have done since: email secured, password changed.
• Give the approximate time it started and what changed (email, phone, name).

Common mistakes

• Clicking links in messages that claim to be from the platform.
• Paying a hacker who offers to return the account.
• Using 'recovery' services that ask for your password or codes.

Step 4: after submitting

• Change passwords on other accounts that shared the same password.
• Report fraud to the police or your national fraud service if money was taken.
• Remove sessions and devices you do not recognise.
• Turn on two-factor with an authenticator app or passkey and save backup codes.

Step 5: if you are stuck

• Both the email and phone were changed.
• The account was disabled after the hacker used it.
• A Business Portfolio or ad account was taken.

What to send

• Your username or profile link.
• A screenshot of the notice or error, with the date visible.
• Which email or phone is on the account (just which one, never a code).
• What happened before it started, in a few lines.

Please do not send passwords, login codes, card numbers or access tokens.

How it works with Acctfix

1. Message us on WhatsApp or email with the username and a screenshot of the notice.
2. We tell you honestly whether this is something we can help with. Terms are agreed with you before any work starts.
3. We prepare the appeal and the supporting details, to go through the platform’s own channels.
4. We stay in touch while you wait. The platform makes the final decision, and nobody can promise the outcome.

About Acctfix

Acctfix is an independent account recovery service. We help with hacked, disabled, suspended and locked accounts on Instagram, Facebook, TikTok, Snapchat and Threads, Meta ad accounts and Business Manager, username claims, impersonation reports and agency work. Contact: WhatsApp +1 934 201 2490 or team@unbanz.com. Independent service. Not affiliated with Meta.