If your Instagram account was hacked, go to instagram.com/hacked and choose “My account was hacked”. Most hacked accounts can be recovered if you act quickly and use only Instagram’s official tools.
Do these three things first: check your email for a message from Instagram about a changed email or password (it often has a link to undo the change), secure your email account (if the hacker has it, they can take Instagram back), and start recovery from Instagram’s own page or app. Never pay anyone who offers to “recover” the account. In this article, Hidemyacc walks through the steps for each scenario, common causes, and how to lock the account down afterward.
1. What happens when an Instagram account is hacked? Common signs
When someone takes over your account, they usually change the password and the linked email or phone number first, so you can’t get back in. After that, they tend to post scam content, message your followers with fake links, change your username or bio, and sometimes demand money to return the account. Spam sent from the account can also lead Instagram to disable it, which adds an appeal step. The longer the hacker stays in, the more damage they can do, so check these signs quickly
Before starting the recovery process, you need to determine whether your Instagram account has actually been compromised. Below are common signs that your Instagram account has been hacked:
- You cannot log in with your old password even though you are sure it is correct.
- The linked email or phone number has been changed and you receive a notification from Instagram about account updates.
- There are posts, messages, stories, or follows that you did not make.
- Your friends report receiving spam links, strange messages, or suspicious content from your account.
- A login alert from a device or location you don’t recognize.
- Your username, bio or profile photo changed without you doing it.
If one or more of these signs appear, it is very likely that your account has been accessed without permission and needs to be handled immediately.
2. How to distinguish between a hacked Instagram account and a suspended account
When you cannot access your account, many people are unsure whether they are facing a security issue or their account has been suspended due to policy violations. These two cases present differently and require completely different solutions.
|
Comparison Criteria |
Hacked account |
Suspended account |
|
Login notification |
Incorrect password even though you did not change it, or notification that email/phone number has been changed |
Clear notification that the account has been disabled due to policy violations |
|
Email received |
Email warning about password change, email change, or unusual login activity |
Email from Instagram informing that the account has been disabled or requesting an appeal |
|
Profile status |
Usually still exists and can still be found by others |
May not be accessible or hidden from search results |
|
Common causes |
Phishing, weak passwords, leaked login information, third-party applications |
Violating community standards, spamming, using automation tools |
If your account still exists but you cannot log in, it is highly likely that it has been hacked. Conversely, if Instagram clearly displays a policy violation notice, your account has most likely been disabled and you will need to submit an appeal.
>>>> READ MORE: What does a restricted Instagram account mean? A complete guide to Instagram’s Restrict feature.
3. How to recover your Instagram account when it has been hacked
Depending on whether you still control your email or phone number, the recovery process will differ. Below are three common scenarios and how to handle each one.
Can you get a hacked account back? In most cases, yes. Recovery depends on what proof you can still give Instagram: access to the original email or phone number, a device you’ve already logged in from, or identity verification by video selfie.
Before you start, prepare:
- Your username, and the email or phone number you signed up with.
- Access to your linked email, including its password. If the hacker may also have your email, secure it first by changing its password and signing out other devices. Otherwise they can take the Instagram account back at any time.
- A phone or computer you’ve logged in from before. Starting recovery from a familiar device can help Instagram recognize you.
- The approximate date you last logged in successfully.
3.1. Case 1: You still have access to your linked email or phone number
If you can still log in, you don’t need the recovery flow. Open Instagram, go to Settings → Accounts Center → Password and security, and change your password. Then check where your account is logged in and sign out any device you don’t recognize.
If you’re locked out, follow the steps below.
-
Select “Forgot password” on the login screen.
-
Enter the linked email or phone number to receive a reset link.
-
Check your inbox, especially emails from [email protected] to undo changes if necessary.
After successfully logging back in, you should:
- Change your password immediately.
- Enable two-factor authentication to increase security.
If the reset email doesn’t arrive, check your spam folder and confirm you’re using the original email. Wait a few minutes before asking again instead of requesting many codes in a row.
3.2. Case 2: The hacker has changed your contact information
If your email and phone number have been changed, you need to request identity verification support.
Follow these steps:
- On the login screen, select “Forgot password”
- Select “Try another way”
- Select “Verify your identity”
Video Selfie verification process:
- Select “Verify your identity.”
- Record a video following the on-screen instructions.
- Perform the requested movements such as turning your face left, right, or looking up.
- Submit the video and wait for review.
The response time usually ranges from 24 hours to a few days.
3.3. Case 3: The account has been disabled
If your account was disabled, which can happen after a hacker used it to send spam, you may need to recover access and also appeal. Start with the steps below, and say clearly that the account was hacked.
You should follow these steps:
Step 1: Access the appeal page
- Access Instagram’s official Help Center here.
- Select Login, Recovery and Security > Account Recovery and Login > Hacked Instagram Account
-
Select “If you think your Instagram account has been hacked” and access the linked page.
Step 2: Enter account information
Enter any information you remember about the account: username / email / phone number
Step 3: Verify your information
-
Choose an appropriate contact method
Follow Instagram’s instructions sent to your contact information.
Beware of “account recovery” services. After a hack, you’ll see ads, comments and DMs from people who promise to get your account back. Avoid them:
- Real recovery happens only through instagram.com/hacked and the official app. Instagram doesn’t contact you through DMs.
- Anyone promising instant or guaranteed recovery, or asking for payment, a password or a verification code, is likely trying to scam or hack you again.
- If you already paid or shared a code, change your passwords immediately and report it to the payment service.
4. Why do Instagram accounts get hacked?
Most hacked Instagram accounts are not due to system errors but unsafe usage habits. Below are the most common causes.
- Using weak passwords or the same password across multiple platforms: If one platform suffers a data breach, hackers may attempt to log into Instagram using that same password. Simple passwords such as birthdays, names, or predictable number sequences increase the risk.
- Clicking on phishing links: Hackers often impersonate emails or messages claiming “You violated copyright,” “Your account will be locked,” or “You won a prize.” Logging in through fake pages allows them to steal your credentials immediately.
- Granting access to untrustworthy third-party applications: Apps that increase followers, auto like, show profile visitors, or unofficial engagement tools may request account access. If the app is not trustworthy, your login information may be exploited.
- A hacked email account: If the attacker controls your email, they can reset your Instagram password and change the email on the account.
- Phone number takeover: If someone takes over your number, they can intercept SMS codes. This is why an authenticator app is safer than SMS for 2FA.
Understanding these causes helps you not only handle a hacked Instagram account but also proactively prevent it in the future.
Can hackers see my password? Not directly from Instagram, which doesn’t show passwords to anyone. They usually get it from you or from somewhere else: you type it into a fake page, you reused it on a site that was later breached, or they take over your email and simply reset it. That’s why a unique password and a secure email matter more than worrying about someone “seeing” it.
5. How to secure your Instagram account after recovery
Recovering your account is only the first step. If you do not strengthen security afterward, the risk of being hacked again remains.
- Enable two-factor authentication (2FA): You should use an authentication app such as Google Authenticator instead of SMS. Authentication apps generate codes directly on your device, making interception more difficult.
- Check login activity: Go to the security settings to review logged-in devices and locations. If you see unfamiliar devices, log them out immediately.
- Update contact information: Make sure the linked email and phone number are active and under your control. If necessary, change your email password as well.
- Save backup codes: Instagram provides backup codes for situations when you cannot receive authentication codes. Store them securely.
- Do not click on suspicious links or install unknown applications: Avoid logging in through intermediary websites or granting access to unofficial third-party apps.
- Review connected apps and linked accounts: Remove third-party apps you don’t trust, and check which Facebook or Accounts Center profiles are linked.
- Clean up the damage: Delete posts, Stories or messages the hacker sent, and check that your username, bio and link in bio are correct.
- Warn your followers: Tell contacts to ignore messages sent while the account was compromised (template in the next section).
Proactive security is the best way to prevent your Instagram account from being hacked again.
6. What if you can’t recover your account?
Sometimes recovery fails, especially when the hacker changed both the email and phone number and Instagram can’t verify who you are. If that happens:
- Try again with identity verification, using a device you’ve logged in from before.
- Report the hacked account, and any impersonation of it, so your followers are protected.
- Warn your followers from another account or platform, using the message below.
- Secure everything linked to it: your email, Facebook and any account that shares the same password.
- If it’s a business account, check whether Meta’s business tools or paid support offer extra recovery help. ⚠ (kiểm tra thông tin hiện tại của Meta Verified trước khi nhắc)
- Start a new account only as a last resort, and tell your contacts.
Message you can share: “My Instagram account (@yourusername) was hacked. Please ignore any messages, links or requests for money from it, and don’t send anyone codes. I’m working to recover it. Thank you!”
7. Conclusion
Having your Instagram account hacked is an unfortunate incident, but it is not impossible to resolve. In most cases, recovery is possible if you act quickly and follow the proper verification process.
To reduce future risks, use strong passwords, enable two-factor authentication, and avoid clicking on suspicious links or using unverified applications. At the same time, comply with Instagram’s policies to avoid unwanted account disablement.
Being proactive about security is the best way to protect your account in the long term.
>>>> READ MORE:
- How to create multiple Instagram accounts on one device: Complete A-Z guide
- What is Instagram shadowban? How to know if your account is shadowbanned
7. FAQ
1. Can I get my hacked Instagram account back?
Yes, in most cases. If you can verify your identity through the linked email, a familiar device, or a video selfie, Instagram may restore access. Use only instagram.com/hacked or the in-app help, and ignore anyone who offers paid recovery.
2. What if the hacker changed my email?
Check the security notification email from Instagram to undo changes if still valid. If not, use identity verification to submit a recovery request.
3. How do Instagram accounts get hacked?
Common methods include phishing, weak passwords, data leaks, unsafe third-party apps, and phone number takeover.
4. What should I do immediately after being hacked?
Use Instagram’s official recovery tools and complete identity verification as soon as possible.
5. Is it guaranteed that I can recover my account?
Recovery depends on whether you still control your email, phone number, or can verify your identity.6. How long does account recovery take?
Usually 1-3 days. It may take longer if additional verification is required.
7. Can hackers delete my Instagram account?
They may request deletion if they control the account. However, Instagram typically provides a waiting period before permanent deletion.
8. Does Instagram help with hacked accounts?
Yes, through instagram.com/hacked or the in-app reporting system. Instagram doesn't contact you through DMs and doesn't offer phone support for hacked accounts, so treat anyone who does as a scammer.
9. What happens when an Instagram account is hacked?
The hacker usually changes the password and the linked email or phone number, then posts scams or messages your followers. The account may also be disabled because of the spam.10. Can hackers see my password?
Not directly. They usually get it through phishing, a password reused on another site that was breached, or by taking over your email and resetting it.
