Finding your Instagram account hacked can be frightening. Hackers may change your password, email and phone number, post scam messages to your followers or demand money to return the account. Creators and small businesses can lose income overnight. The good news is that Instagram has built recovery tools for exactly this situation, and most people can get their accounts back if they act quickly. Here are nine practical steps to recover your profile and secure it for the future.
Table of Contents
Signs Your Account Was Hacked
When your Instagram account hacked by someone, common signs include receiving an email from Instagram saying your email or password was changed, being logged out unexpectedly, seeing posts or messages you did not send, or friends reporting strange crypto or investment offers from your account. If you notice any of these, act immediately. The longer a hacker controls the account, the more changes they can make, such as enabling their own two-factor authentication, which makes recovery harder.
Step 1: Check Your Email for Instagram’s Message
When important details change, Instagram sends an email to the old address saying the change was made, with a link to reverse it if it was not you. Search your inbox and spam folder for messages from security@mail.instagram.com. Click the link to revert the change and secure your account. This is often the fastest way to regain control when your Instagram account hacked situation is discovered early.
Step 2: Use the Login Help Option
If your Instagram account hacked but your phone still works, tap Forgot password or Get help logging in. Enter your username, email or phone number. Instagram will send a login link or code to your registered email or phone if the hacker has not changed them. Follow the link, set a new strong password and log in. If you can access the account this way, immediately move to the security steps below.
Step 3: Request a Security Code
If the email and phone have been changed, choose the option saying you cannot access this email or phone. Instagram will ask for an email address you can access and guide you through further verification. Provide accurate details and avoid creating multiple requests at once, because repeated requests can delay processing. Use the official app or the Instagram Help Center only.
Step 4: Verify Your Identity With a Video Selfie
When an Instagram account hacked case involves changed contact details and your photos, Instagram may ask you to record a short video selfie turning your head in different directions. This helps confirm you are the real owner. The video is reviewed and deleted after verification according to Instagram’s policy. Business accounts may be asked for other details, such as the email used to create the account or the device used. Responses can take a few days.
Recovery Options at a Glance
| Situation | Best option |
|---|---|
| Email still yours | Use the reversal link in Instagram’s email |
| Phone still yours | Use login help to get a code by SMS |
| Email and phone changed | Request support with an accessible email |
| Account with your photos | Complete video selfie verification |
| Account deleted by hacker | Contact Instagram support quickly |
Step 5: Secure the Account After Recovery
After recovering an Instagram account hacked by scammers, change your password to a long, unique one that you do not use anywhere else. Update your email and phone number to ones only you control. Remove unknown devices from the login activity section. Check connected apps and revoke access to anything you do not recognise. These steps ensure the hacker cannot slip back in through an old session or linked third-party app.
Step 6: Turn On Two-Factor Authentication
To avoid another Instagram account hacked incident, enable two-factor authentication. It adds a second check whenever someone logs in from a new device. Use an authentication app rather than SMS where possible, because SIM swap fraud can intercept text messages. Save the backup codes in a safe place. With this enabled, even if someone learns your password, they cannot easily take over the account again, and you will be alerted to login attempts.
Steps 7 to 9: Clean Up and Inform
- Step 7: Delete posts, stories and messages the hacker sent
- Step 8: Warn followers through a story that your account was compromised
- Step 9: Report financial fraud to the 1930 cyber helpline and cybercrime portal
If anyone lost money due to messages from your Instagram account hacked by scammers, report it immediately. Our guide on how to report cyber fraud online explains the steps. Many hacks start with a phishing message offering a blue tick, collaboration or copyright warning, so tell followers never to share codes or click such links.
For Creators and Business Accounts
Creators and brands lose more than photos when an Instagram account hacked attack happens; they may lose sponsorships, customer trust and sales. Keep business email and phone details on a separate, secure account used only for Instagram and Facebook. Give team members access through Meta Business tools instead of sharing your password. Document your account details, such as creation date and old usernames, because support may ask for them during verification. Linking your account to a verified Facebook page can also help prove ownership.
How to Avoid Getting Hacked Again
Most cases of an Instagram account hacked by strangers begin with phishing links, fake login pages or shared OTPs. Never enter your Instagram password on any site other than the official app or website. Ignore messages claiming your account will be deleted for copyright violation unless they appear in the app’s official notifications. Update the app regularly, use a strong screen lock and protect your email account with two-step verification too. If your WhatsApp is also targeted, follow our WhatsApp account hacked recovery guide.
Frequently Asked Questions
Can I recover my Instagram account hacked by someone who changed my email?
Yes. Use the reversal link sent to your old email, or request support and complete identity verification.
How long does Instagram recovery take?
Simple link-based recovery is instant, while video selfie reviews can take a few days.
Should I pay a hacker to return my account?
No. Paying rarely works and encourages more crime. Use official recovery options and report the extortion.
How can I prevent future hacks?
Use a unique strong password, enable app-based two-factor authentication and avoid phishing links.
Conclusion
An Instagram account hacked by scammers can usually be recovered if you act quickly using official tools. Check Instagram’s emails, use login help, verify your identity, then secure the account with a new password, updated contact details and two-factor authentication. Warn followers and report any financial fraud. With good security habits, you can protect your profile and followers from future attacks.
