Losing access to your Instagram account is stressful. Your photos, messages, followers and possibly your business are suddenly in someone else’s hands. Hackers may change your email and password, post scams to your followers or demand money to give the account back. The good news is that Instagram provides several official recovery options, and many hacked accounts can be recovered if you act quickly. This guide explains exactly what to do if your Instagram account is hacked, step by step, and how to protect it afterward.
Signs your Instagram account has been hacked
- You cannot log in and your password no longer works.
- You received an email saying your email address, phone number or password was changed.
- Posts, stories or messages appear that you did not create.
- Your bio, profile photo or username changed.
- Followers tell you they received strange messages from you, such as crypto investment offers or requests for money.
- You see logins from unfamiliar locations in Login activity.
Step 1: Check your email for a message from Instagram
If a hacker changed your email address, Instagram sends a message to your original email from security@mail.instagram.com. It often includes an option to revert the change or secure your account. Click that link right away to undo the change and reset your password.
Be careful: scammers send fake “Instagram” emails too. In the Instagram app, you can see official emails Instagram has sent you under Settings, Accounts Center, Password and security, Emails from Instagram (location may vary), if you still have access.
Step 2: Use Instagram’s hacked account page
Go to instagram.com/hacked on a browser or tap Forgot password on the login screen and choose the option that your account was hacked. Instagram will guide you through options such as:
- My account was hacked
- I forgot my password
- Someone is pretending to be me
- My account was disabled
Select My account was hacked and follow the steps.
Step 3: Request a login link or security code
Instagram can send a login link or code to the email or phone number linked to your account. If the hacker changed those details, choose the option to use a different email or phone, or indicate that you no longer have access.
Step 4: Verify your identity
If you cannot regain access with codes, Instagram may ask you to verify your identity:
- Video selfie: for accounts with photos of you, Instagram may ask you to record a short video of your face turning in different directions. This is used to confirm you are the account owner.
- Account details: you may be asked for the email or phone number you used to sign up and the type of device you used.
- Business accounts: you may be asked for business documents.
Follow the instructions carefully. Responses can take time.
Step 5: Secure your account after recovery
Once you are back in:
- Change your password to a strong, unique one you do not use anywhere else.
- Turn on two-factor authentication in Accounts Center, Password and security, Two-factor authentication. Use an authenticator app rather than SMS if possible.
- Review login activity and log out of unfamiliar sessions.
- Check your email and phone number in your account settings and update them if needed.
- Remove suspicious third-party apps under Settings, Website permissions, Apps and websites.
- Review linked accounts such as Facebook in Accounts Center.
- Delete posts or messages the hacker created and warn followers.
- Secure your email account, since hackers often get in through compromised email. See how to set up two-factor authentication on Gmail.
Recovery options at a glance
| Situation | Best option |
|---|---|
| Hacker changed email, you got Instagram’s email | Use the revert link in the email |
| You still have access to email or phone | Request login link or code |
| Hacker changed email and phone | Use instagram.com/hacked and verify identity |
| Account has photos of you | Video selfie verification |
| Account was disabled after hack | Use the disabled account appeal option |
| Someone created a fake account of you | Report impersonation |
Beware of recovery scams
After a hack, scammers may contact you claiming they can recover your account for a fee. Others pose as “Instagram support” in DMs. Instagram does not send DMs asking for passwords or payment to recover accounts. Only use official Instagram tools. Paying “hackers for hire” often leads to more losses.
How hackers get into Instagram accounts
| Method | How it works | Prevention |
|---|---|---|
| Phishing | Fake login pages or “copyright violation” DMs | Never log in through links in messages |
| Password reuse | Passwords leaked from other sites | Use unique passwords |
| Compromised email | Hacker resets your Instagram password | Secure your email with 2FA |
| Fake verification offers | “Get the blue badge” scams | Only use official Meta Verified settings |
| SIM swap | Hacker takes over your phone number | Use authenticator app 2FA, carrier PIN |
| Third-party apps | Apps requesting login details | Avoid unofficial follower or analytics apps |
For more on phishing, read how to tell if an email is a phishing scam.
Warn your followers
Post a story or ask a friend to post that your account was hacked, so followers ignore any scam messages. Common scams sent from hacked accounts include fake crypto investments, giveaways and requests to vote in contests that steal logins.
Real examples
The quick revert. Jess received an email that her email address had changed. She clicked the official revert link within minutes and secured her account before the hacker could do anything.
The video selfie. Omar’s email and phone were both changed. He used instagram.com/hacked, recorded a video selfie and regained access two days later.
The crypto scam. Lina’s account posted fake crypto stories. After recovery, she deleted them, posted a warning and enabled 2FA with an authenticator app.
Frequently asked questions
How long does Instagram account recovery take?
It can take minutes if you use the revert link, or several days if identity verification is needed.
Can I contact Instagram support directly?
Instagram’s main support routes for hacked accounts are the in-app help and instagram.com/hacked. Meta Verified subscribers may have access to additional support.
What if my account was deleted by the hacker?
Accounts that are scheduled for deletion may be recoverable if you act within the allowed period. Try logging in or using the hacked account tools quickly.
Will I lose my followers if my account was hacked?
Usually not, if you recover the account. Followers stay unless the hacker removed them or the account was deleted.
How can I prevent future hacks?
Use a unique password, enable two-factor authentication with an authenticator app, secure your email and never log in through links in messages.
Protecting a business or creator account
If Instagram is part of your income, a hack can cost real money. Take these extra steps:
- Use a dedicated email for your Instagram account that is not shared publicly and is protected with two-factor authentication.
- Manage access through Meta Business Suite or Accounts Center instead of sharing your password with employees, agencies or freelancers. Give them roles you can remove later.
- Review who has access regularly and remove people who no longer work with you.
- Keep a record of account ownership, such as the original email, phone number, date created and any business documents, which can help during recovery.
- Back up your content by downloading your information periodically from Accounts Center, so you keep a copy of photos and posts.
- Be wary of collaboration and sponsorship emails asking you to log in through a link or download a “contract” file.
What a strong password looks like
A strong password is long, unique and hard to guess. A good approach is a passphrase of four or more random words, such as “river-lantern-cactus-violet,” or a long random password generated and stored by a password manager. Avoid names, birthdays, your username, pet names and common patterns like “Password123!” Most importantly, never reuse your Instagram password on any other site, because a breach somewhere else could expose it.
Recovery checklist you can save
- Look for the security@mail.instagram.com email and revert changes.
- Go to instagram.com/hacked and choose “My account was hacked.”
- Request a login code or link, or verify with a video selfie.
- Change your password to a long, unique one.
- Turn on two-factor authentication with an authenticator app.
- Log out of all unknown sessions.
- Remove unknown apps and linked accounts.
- Secure your email account.
- Delete scam posts and warn followers.
- Watch your account closely for the next few weeks.
Save this list so you can act fast if anything ever happens again.
Acting within the first hour after a hack gives you the best chance of a quick recovery, so bookmark instagram.com/hacked now.
The bottom line
If your Instagram account is hacked, check your email for Instagram’s revert link, then use instagram.com/hacked to request codes or verify your identity with a video selfie. Once you regain access, change your password, enable two-factor authentication, review login activity and remove suspicious apps. Avoid recovery scams and secure your email to prevent it from happening again. If you suspect your phone is compromised, see how to check if your phone is hacked.