How to Recover a Hacked Social Media Account: The First Hour and After
What to do the moment a social media account is hacked: secure your email, use the platform's official recovery, warn your audience, check your links and lock it all down for next time.
A hacked account is a race. The person who took it will try to change the email, phone and password, then use the account for scams or sell it. The faster you act, the better your chances of getting it back.
This is the order that works: protect what the hacker could reach next, then use the platform's own recovery, then clean up. Skip the "recovery experts" who message you; more on them below.
The first 15 minutes
- 1Secure your email. Change its password and check its 2FA. If the email is gone too, recover it first; everything else depends on it.
- 2Look for the platform's security email. Most send a message when the email on the account is changed, often with a link to undo it. Use it straight away.
- 3Try to log in and change the password if you still can.
- 4Change the password anywhere you reused it. Hackers try the same password on every service.
- 5Tell your team to stop logging in to the account until it is safe.
Use the platform's official recovery
Every big platform has its own recovery route. Go to it directly through the app or by typing the platform's address, never through a link someone sends you.
| Platform | Where to start | What helps |
|---|---|---|
| Instagram / Facebook | "Forgot password" → "Need more help" or the hacked-account help page | Old email or phone, a video selfie if offered |
| X (Twitter) | Password reset, then the hacked-account support form | Original email, recent login details |
| TikTok | Login help → report a hacked account | Phone or email used to sign up |
| Password reset by email, then Reddit's help centre | Email verified on the account | |
| Telegram | Log in with your number; end other sessions in settings | Your SIM and 2FA password |
| YouTube / Google | Google account recovery | Recovery phone or email, a familiar device |
Recovery forms trust details they already know: the original email, the phone number, a device you used before, the place you usually log in from. That is why keeping a clean, consistent setup per account pays off here (see managing multiple accounts).
Beware of recovery scams
Right after a hack, people get DMs and comments from "recovery services" that promise to get the account back for a fee. They are almost always scams, and some are the same people who took the account. Platforms recover accounts for free through their own forms. Nobody legitimate will ask for your password, your codes or a payment in crypto.
Once you're back in
- 1Change the password to a new, unique one from your password manager.
- 2Turn on app-based 2FA and save fresh backup codes (2FA for promoters).
- 3Log out all other sessions and remove unknown devices.
- 4Remove connected apps and tools you don't recognise.
- 5Check the bio and link: hackers often swap your link for theirs. Re-check your tracked link with the tracking link builder.
- 6Delete posts and DMs the hacker sent, and post a short note telling followers what happened and to ignore messages sent in your name.
- 7Check the email and phone on the account are yours.
If you can't get it back
Keep trying the official route for a while; some recoveries take days. Report the account as hacked so the platform can stop it being used for scams. Tell your audience on your other channels, which is one reason to have one you own, like a Telegram channel. Then build again, clean, from a secure setup. Don't buy a replacement account; bought accounts are against most platforms' rules and often get taken back.
Make it unlikely to happen again
- A unique password for every account, kept in a password manager.
- App-based 2FA everywhere, the strongest method on your email.
- Never log in through links in DMs or emails, especially "brand deal" and "copyright" messages.
- Remove team members' access the day they leave.
- Write it all into your team's SOPs.
FAQ
What should I do first if my social media account is hacked?+
Secure your email account, then look for the platform's security email about the change and use its undo link. After that, go through the platform's official recovery page.
Can I recover a hacked account if the email and phone were changed?+
Often, yes. Platforms keep the original details and many offer identity checks like a video selfie or questions about past logins. Start from the platform's hacked-account help page.
Are account recovery services legit?+
Services that contact you after a hack and ask for money are almost always scams. Recovery through the platform's own process is free.
How long does it take to recover a hacked account?+
From minutes, if you catch the security email, to days or weeks through support forms. Act quickly and keep checking the official route.
Promote with a partner, not just a link.
AMZA promoters get a dedicated manager, approved content, live tracking and weekly payouts.