Skip to content
SOS Informatique Computer repair in Lyon - Individuals and businesses

My Facebook or Instagram account has been hacked

Act fast : the sooner access is taken back, the smaller the damage. And warn your contacts, who are often the real targets.

A hijacked account is rarely used to harm you directly. It is mostly used to write to the people close to you in your name, with all the credibility that carries - a request for money, a fake investment, a booby-trapped link. That is why warning people matters as much as recovering the account.

If you still have access to the account

Do not lose any time :

  1. Change the password to a unique one, not reused anywhere else.
  2. Log out all active sessions, in the security settings. This is essential : without it the intruder stays logged in despite the new password.
  3. Turn on two-factor authentication.
  4. Check the email address and phone number attached to the account : they are often the first things changed.
  5. Review the authorised third-party apps and remove any you do not recognise.

If you have lost access

Every platform has a recovery procedure, reached from the login page through the forgotten password link and then the hacked account options. Depending on the case it asks for a code sent to the original address or phone, a proof of identity, or a verification video.

Two pieces of advice that clearly improve your chances : go through the procedure from the device and the place you normally use, which the platform recognises. And check your email, junk folder included : a notification of the change often contains a link to cancel it, valid for a limited time.

Warn your contacts straight away

Even before you have recovered the account, warn people through another channel - a message, a call, another network. One sentence is enough : "my account has been hacked, ignore any messages you get from me". That stops someone close to you sending money thinking they are helping, which is the real loss in most cases.

Once you have it back

Taking the password back does not close the matter. Check :

  • The messages sent in your name, and the friend requests accepted.
  • Any posts or stories added.
  • Administrators added to your pages or groups - an often forgotten point, and one that lets someone take control again later.
  • The saved payment methods, and any advertising that may have been run with them.

Above all, change the password of the associated email account: if that has been compromised, everything else can be taken back. It is the one that controls the rest.

The fake profile case

Different from hacking : your account works fine, but someone has created a profile in your name with your photos to approach your contacts. There is nothing to recover ; you have to report the impersonation to the platform and warn the people close to you. Here too, the warning is the best protection.

Getting support

We cannot unlock an account for you - only the platform can - but we can help you go through the procedure properly, check that the machine is not the source of the leak, and secure all your access afterwards. See securing your accounts.

Frequently asked questions

How could my password have been found out ?

Usually through a fake login page, or through reusing a password that leaked from another service. Rarely through a direct attack on the platform.

How long does recovering an account take ?

From a few minutes with a verification code, to several days or weeks if identity checks are needed. Acting quickly counts for a great deal.

Should I report it to the police ?

It is worth doing where there is financial loss, identity theft, or harmful messages sent in your name. Keep screenshots as evidence.

Further reading

Would you rather we took care of it ? See our IT security service, in Lyon and across the Rhone.

An account slipping out of your hands ?

We guide you through recovery and secure everything else.

Contact Us