How to Recover a Hacked Instagram Account
Someone took over your Instagram account. How to use Instagram's official recovery options, what to do if the email and phone were changed, and how to secure the account once you are back in.
Losing an Instagram account can mean losing years of photos, a business audience, or both, and hackers often use taken accounts to scam your followers straight away. Act quickly, and use only Instagram's official recovery routes.
Step 1: Check your email for a message from Instagram
When the email address on an account is changed, Instagram typically sends a notice to the old address. Look for it, including in spam. It may include an option to reverse the change and secure your account. Check the sender and links carefully, because scammers also send fake Instagram emails.
Step 2: Use Instagram's hacked account page
Go to Instagram's official hacked account page at instagram.com/hacked, typed into your browser yourself, or use the login help option in the Instagram app. It walks you through options such as:
- receiving a login link or code by email or text
- identity verification, which may involve a video selfie for accounts with photos of you
- verification for business accounts
Use a device and connection you have used with Instagram before, if possible.
Beware of fake recovery help. Comments and messages from "Instagram support" or "recovery experts" are scams. Instagram does not contact you by direct message to recover your account. See official vs fake recovery services.
Step 3: Once you are back in, secure it
- Change your password to a new unique one.
- Turn on two-factor authentication, ideally with an authenticator app.
- Check your email and phone number in account settings.
- Review login activity and log out of unfamiliar devices.
- Remove unfamiliar connected apps and websites. See connected apps.
- Check posts, stories, bio links and messages the hacker may have added.
Step 4: Warn your followers
Hackers often message followers with crypto "investment" offers or requests for help. Post a story or message close contacts to say the account was hacked. See warning friends after a hack.
Step 5: Secure your email
If the hacker got in through your email, secure it first. See how to secure your email account.
How Instagram accounts get hacked
- Fake "copyright violation" or "verification badge" messages leading to login pages.
- A friend's hacked account asking you to send a code "by mistake".
- Reused passwords leaked from other sites.
- Fake giveaways and brand collaboration offers.
Got a message from "Instagram"? Paste it into CyberWatch AI Scan for a free check before you click.
For the full picture of account takeover and recovery, read our guide to account takeover and identity protection.
Frequently asked questions
The hacker changed my email and phone. Can I still recover it?
Often yes. Instagram may send a message to the original email address when it is changed, which can let you reverse the change, and its hacked-account page offers identity verification options. Use only the official routes.
Should I pay someone who says they can recover my Instagram?
No. Paid 'recovery experts' who contact you or advertise in comments are almost always scammers. Only Instagram can restore your account.
How do I stop it happening again?
Use a unique password, turn on two-factor authentication with an authenticator app, check connected apps, and never share login codes or respond to fake 'copyright violation' messages.
Sources
- My Instagram was hacked, Instagram Help
- How To Recover Your Hacked Email or Social Media Account, US Federal Trade Commission
- Social media: how to use it safely, UK National Cyber Security Centre
