Instagram hacked recover

Short answer. For a hacked Instagram account, secure the email on the account first, then use Instagram's hacked-account help. If a security email says the address was changed, use the secure-my-account link in it. If login shows a disabled or suspended notice, screenshot that notice and request a review from it. Never send your password to someone who DMs you.

Instagram hacked recover is two jobs that people mix into one. Either someone else is inside the account, or Instagram has disabled it because of what that person did. You can be dealing with both. You can tell them apart from the screen, and the first move is always the email you still control. Start a case on the contact page if the hack turned into a disable notice.

Work out which screen you have

Log in on a device you have used for this account before. Then match what you see.

  • The password fails, or the email and phone on the account are no longer yours, and there is no ban notice. This is a takeover. Follow the steps below and Instagram’s hacked-account help.
  • The screen says the account is disabled or suspended. The account needs a review even if a hack caused it. Screenshot the notice and use the disabled account guide or the suspended notice guide. Say in the appeal that the account was compromised.
  • You can log in, but posts, the bio, or the email look wrong. You still have a session. Secure the account from the inside, using the list at the end of this guide, and then deal with any disable notice if one appears.

Instagram’s help page on hacked profiles lists the recovery steps and points people who cannot log in to the hacked-account flow in a browser. Use that official help: If you think your Instagram profile has been hacked. Do not type your password into a form a stranger sent you.

Secure the email before anything else

The person who reads the email on the account receives the password resets and the “secure my account” links. If that inbox is open to the hacker, every reset goes to them.

On a phone or computer you trust:

  1. Open the email you used for Instagram. If you see sign-in alerts you do not recognize, change that email password and turn on the email provider’s extra sign-in check.
  2. Search for mail from security@mail.instagram.com. Instagram’s help page says that if they wrote to tell you the email address was changed, you can undo the change from “secure my account” in that message. Do that while the link works.
  3. Search the same inbox for other Instagram mail about a password, a phone number, or a disabled account. Save those messages. They are your timeline.
  4. If you have a second email that you know is clean, keep it ready. You will want a clean address on the Instagram account once you are back in.

If you cannot get into the old email either, recover the email with that provider first. Instagram cannot send a useful link to an inbox nobody controls.

Then use Instagram’s own recovery

From a browser, follow the hacked-account steps on Instagram’s help page. Enter the username. Use a device you have logged in with before when the page asks. Have the old email and the old phone number written down, even if they were changed, because the form asks what used to be on the account.

When a code arrives, type it yourself. A code is a key. It is not something you forward to a “recovery agent” in your DMs.

If the flow ends on a disabled or suspended notice, stop and treat that as the appeal. Request a review from the button. In the text box, include a simple timeline: when you last had the account, when the email or password changed, and that you want the decision reviewed because the account was hacked. Finish a video selfie if Instagram asks. That clip is how they match a real person to the profile. The account owner records it. We do not.

After you are back in

Do this in one sitting, before you post anything.

  • Set a new password you have never used on another site.
  • In settings, log out other sessions, or “log out of all devices” if that control is there.
  • Turn on two-factor authentication with an authenticator app or your phone number. Save the backup codes somewhere offline, not in the Instagram DMs.
  • Check the email, phone, and birthday on the account. Put back anything you did not change.
  • Open Accounts Center and look at linked Facebook profiles. A hack that started on Facebook can still be sitting there. If Facebook shows its own notice, use the Facebook guide.
  • Remove follower-gaining apps and any third-party tool you granted access to. Those apps are a common way in.

Tell friends the account was hacked if it sent them strange links. You do not need to post a public apology essay. A one-line story is enough after the account is locked down.

People who show up offering to fix it

A hacked account attracts messages. Some of them will claim they can get in today if you send the password, a code, or a photo of your ID. That is how a second person takes what the first person took. Meta does not do support in random DMs. UnbanPro does not either.

What we do is prepare and file the appeal when the hack turned into a disable or a suspension. Send the username, the screenshot of the notice, and the email you can still open. The review is free. It takes a few days. We file through Meta’s own official channels, open support chats, send follow-up emails, and push the case until it gets looked at.

The home page is the overview. How it works is the three steps. The contact page is there for email. Leave every password and every code out of the message. If the notice gave no policy name, say so. The no reason guide matches that situation.

Related reading

Questions

How do I recover a hacked Instagram account?

Secure the email you used for Instagram, open any message from security@mail.instagram.com, and follow Instagram's hacked-account steps on a device you have used before. If the login shows a disabled notice, appeal from that notice as well.

What if the hacker changed the email on Instagram?

Search the old inbox for a message from security@mail.instagram.com about the change. Instagram's help page says you can use the secure-my-account link in that message. If the link is expired, continue with their hacked-account help and keep the email as proof.

The hacker got the account disabled. Which problem do I fix first?

Both. Secure the email so Instagram can reach you, and screenshot the disabled or suspended notice so you can request a review. A password reset alone does not clear a disable screen.

Do you need my password to recover a hacked account?

No. We never ask for the password, a text code, or backup codes. Send the username, the screenshot, and the email you can still open.

WhatsApp us