Find the security email
When the email on an account changes, Instagram writes to the old address. Search for 'Instagram email changed' and check spam. The message has a link to secure your account.
If the link has expired
- Open instagram.com/hacked on the phone you normally use.
- Choose 'My account was hacked'.
- Enter the username and pick the old email or phone.
- Follow the code or video selfie step.
Then lock it down
- Change the password to one you have never used.
- Turn on two-factor authentication with an authenticator app.
- Remove unknown devices under Accounts Center, Password and security, Where you're logged in.
- Check that the email and phone are yours again.
Step 1: the route, in order
Work through the steps below in order. Skipping ahead usually costs time.
- Take back the email account first. Change its password, sign out other sessions, and check forwarding rules.
- Look for the change-alert email from the platform; many include a link to undo the change.
- Use the platform's hacked page: instagram.com/hacked or facebook.com/hacked for Meta, Report a problem on TikTok, Snapchat Support's hacked form.
- Secure business assets: remove unknown admins, partners and apps, and pause ads.
- Tell friends and followers that recent messages may be fake. Call your bank about any charges.
Step 2: proof to gather
- Photos or videos of yourself, for a selfie check.
- The device you normally use.
- Change-alert emails with dates.
- Bank statements showing unknown charges.
- The original email and phone on the account.
Step 3: what to write
- Give the approximate time it started and what changed (email, phone, name).
- Say what you have done since: email secured, password changed.
Common mistakes
- Paying a hacker who offers to return the account.
- Clicking links in messages that claim to be from the platform.
- Using 'recovery' services that ask for your password or codes.
Step 4: after submitting
- Turn on two-factor with an authenticator app or passkey and save backup codes.
- Change passwords on other accounts that shared the same password.
- Report fraud to the police or your national fraud service if money was taken.
- Remove sessions and devices you do not recognise.
Step 5: if you are stuck
- Both the email and phone were changed.
- The account was disabled after the hacker used it.
- A Business Portfolio or ad account was taken.
What to send
- Your username or profile link.
- A screenshot of the notice or error, with the date visible.
- Which email or phone is on the account (just which one, never a code).
- What happened before it started, in a few lines.
Please do not send passwords, login codes, card numbers or access tokens.
How it works with Acctfix
- Message us on WhatsApp or email with the username and a screenshot of the notice.
- We tell you honestly whether this is something we can help with. Terms are agreed with you before any work starts.
- We prepare the appeal and the supporting details, to go through the platform’s own channels.
- We stay in touch while you wait. The platform makes the final decision, and nobody can promise the outcome.
About Acctfix
Acctfix is an independent account recovery service. We help with hacked, disabled, suspended and locked accounts on Instagram, Facebook, TikTok, Snapchat and Threads, Meta ad accounts and Business Manager, username claims, impersonation reports and agency work. Contact: WhatsApp +1 934 201 2490 or team@unbanz.com. Independent service. Not affiliated with Meta.