Instagram Account Hacked? Here's How to Get It Back

You open Instagram, try to log in, and nothing. Wrong password. Email changed. Profile photo swapped. Panic sets in.

You're not alone. Social media account takeover is now the most common form of identity misuse consumers report, making up 35% of cases in 2025, up from 29% the year before (Identity Theft Resource Center). And account recovery scammers are waiting to prey on victims in their most vulnerable moments.

The good news? Most hacked Instagram accounts can be recovered, if you know the right steps and avoid the wrong ones.

This guide walks you through exactly what to do, right now.

How to tell if your Instagram account has been hacked

Before panicking, confirm you're actually dealing with a hack. Here are the most common warning signs:

• You can't log in, your password no longer works
• Your email or phone number was changed, you may have received an automated "your email was changed" notification from Instagram
• Unexpected posts or stories appeared that you didn't create
• Friends received strange DMs or follow requests from your account
• You received a login alert from an unfamiliar location or device
• Your profile photo, bio, or username was changed without your knowledge

If any of these ring true, act immediately, time is critical.

Step 1: Go to instagram.com/hacked right now

Instagram's official recovery portal is your first and most important stop. Here's exactly what to do:

1. Open a browser and go to instagram.com/hacked
2. Enter your username, email address, or phone number
3. Select "My account was hacked"
4. Request a login link or security code sent to your email or phone number
5. Click the link or enter the code when it arrives
6. Once you're back in, change your password immediately
7. Go to Settings → Accounts Center → Password and Security → Where You're Logged In and log out of all other sessions

Important: Only submit one recovery request. Sending multiple requests from different devices can trigger Instagram's bot-detection systems and slow down your recovery.

Step 2: Try the "Forgot password" route

If the hacked portal doesn't immediately work, try this alternative:

1. Open the Instagram app and tap "Forgot password?" on the login screen
2. Enter your username, email, or phone number
3. Tap "Send Login Link"
4. Check your email or SMS for the link and follow the instructions

If you still have access to your email or phone number (even if the hacker changed the one on the account), this is often the fastest path back in.

Step 3: What if the hacker changed your email and phone number?

This is the scenario most people fear, and it's more common than you think.

Check for Instagram's automatic "Revert this change" email

When Instagram detects a change to your account email, it sends a security notification to your old email address with a "Revert This Change" link. If you still have access to that old email, click that link immediately to undo the change and lock the hacker out.

Use Instagram's video selfie verification

If the contact details are fully compromised, Instagram offers a video selfie identity check. You record a short video of your face, and Instagram's system matches it against photos already associated with your account. This can take a few hours to a few days, but it works.

Log in with Facebook

If your Instagram and Facebook accounts are linked, try tapping "Log in with Facebook" on the Instagram login screen. This can restore access without requiring the hacker's changed password, as long as your Facebook account is secure.

Step 4: What if your account was disabled too?

Hackers often use hijacked accounts to blast spam or scam content. Instagram's automated systems may flag this activity and disable your account, even before you regain control.

If you see a "Your account has been disabled" message:

1. Follow the on-screen instructions to submit a review/appeal request
2. Provide any requested verification details
3. Be patient, reinstatement reviews can take several business days

You'll need to resolve both the hack and the disablement appeal simultaneously.

Step 5: Contact Instagram support directly

If all self-service options have failed, escalate to Instagram Support:

1. Go to instagram.com/hacked → Tap "Get More Help"
2. Or visit: Settings → Help → Report a Problem → Something Isn't Working
3. Complete any identity verification steps they request (government ID, video selfie, etc.)
4. Be clear, honest, and patient, human review can take 1-5 business days

Note: There is no Instagram phone support number. Any number you find online claiming to be Instagram support is a scam.

Watch out for Instagram recovery scams

This is critical. When you search for help after being hacked, you'll encounter dozens of fake "recovery services" in ads, comments, and search results. They exploit your fear and urgency.

Red flags to watch for:

• Any "Instagram support number" found in an ad, comment, or search result
• Anyone promising instant account recovery
• Services asking for your password or payment upfront
• DMs from accounts claiming to be Instagram staff

Instagram will never contact you through DMs, and legitimate recovery only happens through instagram.com/hacked or the official Instagram app. Period.

Never pay these services. They are scams, every single one of them.

How to secure your account after recovery

Getting your account back is step one. Locking it down so it never happens again is step two.

Change your password, make it strong and unique

Use a password that's at least 14 characters, with a mix of uppercase, lowercase, numbers, and symbols. Never reuse a password from another site. Compromised credentials were an initial access vector in 22% of breaches in Verizon's 2025 Data Breach Investigations Report, and credential-stuffing attacks (automated logins using stolen passwords) accounted for as much as 19% of authentication attempts on a typical day, spiking to 44% on the worst days (Verizon).

Enable two-factor authentication (2FA)

This is the single most effective way to protect your Instagram account:

1. Go to Settings → Security → Two-Factor Authentication
2. Tap Get Started
3. Choose your preferred method: Authentication App (most secure) or SMS
4. Save your backup codes in a secure place

With 2FA enabled, a hacker needs physical access to your phone or authenticator app, even if they have your password.

Review all linked apps and third-party access

Go to Settings → Security → Apps and Websites and revoke access for any apps you don't recognize or no longer use. Rogue third-party apps are a common backdoor for hackers.

Secure your email account too

Your email is the master key to most of your online accounts. If your Instagram was hacked, there's a strong chance your email is at risk too. Change your email password and enable 2FA there as well.

Check active login sessions

Under Settings → Accounts Center → Password and Security → Where You're Logged In, you can see every device currently signed into your Instagram. Remove anything unfamiliar immediately.

Set up login activity alerts

Instagram will send you a notification if someone tries logging in from an unfamiliar device. Make sure your email and phone notifications are turned on so you catch suspicious activity early.

Why Instagram accounts get hacked (and how to avoid it next time)

Understanding how attackers get in helps you stay a step ahead. The most common attack methods include:

Source: Security.org Account Takeover Annual Report

Quick-reference recovery checklist

Use this if you're in recovery mode right now:

• Go to instagram.com/hacked
• Request a login/security code to your email or phone
• Check your old email for a "Revert this change" link
• Try "Forgot Password" via the app
• Try "Log in with Facebook" if accounts are linked
• Request video selfie identity verification if needed
• Once in: change password immediately
• Log out of all other sessions
• Enable Two-Factor Authentication
• Secure your email account
• Revoke all suspicious third-party app access
• Report and ignore any "recovery service" DMs or ads

Conclusion

A hacked Instagram account is stressful, but it's recoverable in most cases. The key is to move quickly through Instagram's official channels, avoid the scammers waiting to take advantage of you, and lock your account down once you're back in.

Recovery time varies widely, but victims who act within the first hour using the right steps are typically back in within minutes to a few hours. Waiting, or falling for a recovery scam, can stretch that into days or weeks.

Start at instagram.com/hacked. The rest follows from there.

Get a free security scan with Guardio today and stay protected from account takeovers.