Instagram account hacked? How to Get Your Account Back (2026)

Instagram account hacked? Find Instagram's email in your inbox — one click can revert the change. Then use official recovery steps and secure your account.

Updated: October 4, 2026 · 11 min read

If your Instagram account was hacked, the fastest fix is usually to open the email address that was linked to your account and find Instagram's message about the email change — clicking the link in that email can often revert the change immediately. If that doesn't work, go to Instagram.com/hacked or use the "Forgot password?" and "Get help logging in" options on the login screen. Instagram has no public support email or phone number, so all legitimate recovery happens through these official flows.

Waking up to find your Instagram account hacked is one of the worst feelings on the internet. You're locked out, your profile photo and bio have changed, and your friends are getting strange DMs from your handle. The important thing to know is that you are not powerless. Instagram handles hacked accounts every day, and there are official, free recovery paths built for exactly this situation. They work best if you act quickly and ignore anyone who offers to "fix it for you" for a price.

The hard truth is that Instagram does not offer a general public support email or phone number, and it never DMs you first to offer help. Every legitimate recovery step runs through Instagram itself: the login screen, the password reset page, instagram.com/hacked, and the Help Center. Anyone who claims they can get your account back for a fee, or asks for your password or two-factor codes, is a scammer. Read the steps below in order — most people recover their account using the first one.

Fastest fix first: revert the email change from your inbox

Start here before anything else. When a hacker takes over an account, the first thing they usually do is change the email address so that password resets go to them instead of to you. Instagram knows this is the number one sign of a hack, so it sends an automatic email to your old address the moment the email change happens. That email contains a link that can undo the change and lock the hacker out — no waiting, no support ticket needed. If you can still open the inbox you used for Instagram, this is your fastest route back in.

This is also the official path Instagram recommends for hacked accounts. The link in that email is time-sensitive and only works for a limited window, so open it as soon as you find it. If the email isn't there, don't panic — move on to the steps below, then to the sections that follow. Every attempt to reset the password or verify your identity can work in your favour, so keep going calmly rather than trying random things.

• Open the inbox of the email address you used for Instagram, including the spam or junk folder, and search for messages from security@mail.instagram.com.
• Look for a message saying something like "The email address on your Instagram account was changed" or "We changed your email."
• Click the link that says "revert this change" or "secure my account" and follow the prompts. This is usually enough to start the recovery.
• If there is no email, go to instagram.com/hacked in a browser on your phone or computer and follow the steps on that page.
• On the Instagram login screen, tap "Forgot password?" and enter your username, email or phone. Then choose "Need more help?" or "Get help logging in" if you get stuck.
• If your Facebook and Instagram accounts are linked, tap "Log in with Facebook" on the login screen. That can restore access without a password.
• Do not pay anyone, and never share a login code or two-factor code with a person or website claiming to be support.

If the hacker changed your email and phone number

This is the scenario people fear most: you try to reset your password and Instagram tells you it has sent a code to an email or phone number you don't recognise. That means the hacker has replaced both of your recovery methods. Don't give up — Instagram has a formal process for exactly this, and it is free. You will need to prove you own the account through identity verification, which Instagram offers in the recovery flow when it can't confirm you another way.

Step 1: Try to revert the email change

Even if the hacker changed the phone number too, Instagram's email-change notification goes to the email address that was attached when the change was made. Search that inbox one more time for a message from Instagram about a change to your account. Clicking "revert this change" is usually enough to reverse the hacker's email change and start the password reset flow. If you no longer have access to that email address at all, note that down — Instagram will ask about it during identity verification.

Step 2: Use instagram.com/hacked

Open a browser and go to instagram.com/hacked, or tap "Get help logging in" from the login screen. Instagram will walk you through a short form: the account you're trying to recover, the email or phone number you think is on it, and a description of what happened. Answer honestly. If you request identity verification, Instagram may ask you to confirm your identity in another way, such as through a video selfie.

Step 3: Video selfie identity verification

When Instagram offers it, a video selfie is the most reliable way to prove you own the account. Instagram will ask you to record a short video of your face from a few angles, then review it. Do this in a well-lit room with a stable connection. Instagram says the video is only used for verification and is never posted anywhere. If the option isn't offered right away, it may appear later — keep checking the login flow and try again after some time.

Secure your Instagram account after you get back in

Getting back in is only half the job. The hacker has already seen your account, and they may have left behind a linked email address, a saved login, or a connected app that gives them a way back in. Take the next fifteen minutes to close every door they opened. This is also the moment to warn your friends, because the hacker may have messaged them from your account asking for money or sending links while you were locked out.

• Change your password to something long and unique. A passphrase of several random words works well and is easier to remember.
• Turn on two-factor authentication in Accounts Center under Password and security. Use an authenticator app or a security key if you can — SMS is better than nothing but can be intercepted.
• Review your login activity and log out of any session or device you don't recognise.
• Remove any email address, phone number, or connected app you didn't add. Check both Instagram settings and the Accounts Center.
• Check your profile for changes the hacker made to your bio, profile photo, links, and posts. Delete anything that isn't yours.
• Tell your friends and followers what happened. Ask them to ignore messages from your account during the hack and to report anything suspicious.
• Check the email account linked to Instagram too. If the hacker got into that, they may still have access to other accounts.

What to do if you still can't get back in

Sometimes the hacker got in through a device that still has access, the account was disabled, or Instagram's automated checks aren't working for you. Here is what you can actually do, in order of usefulness. Patience matters: recovery reviews can take time, and opening multiple requests or creating new accounts can slow things down rather than speed them up.

• Try the "Log in with Facebook" option if your accounts are linked. It can bypass a password problem entirely.
• Use identity verification again if Instagram offers it. Reviews take time, but you can usually retry after a few days.
• If you subscribe to Meta Verified, use the in-app support it includes. That is the only paid support channel Meta offers, and it's optional — you can't buy it separately just to recover an account.
• Check the Instagram Help Center for the latest recovery steps. There is no general public support email or phone number, and anyone who gives you one is making it up or scamming you.
• Don't create a new account with the same username right away. It can complicate the recovery process and confuse your followers.

How to tell a real Instagram email from a phishing one

If you've been phished once, the last thing you need is another fake email. Instagram's security notices come from addresses like security@mail.instagram.com, but that alone isn't enough, because scammers spoof sender names all the time. The safest check is inside the app: open Settings and privacy, go to Accounts Center, then Password and security, and look at "Emails from Instagram." Meta keeps a list of every security email it has sent you. If the email you received isn't on that list, treat it as fake and don't click anything in it.

• Never click links in DMs claiming your account is at risk or that you've violated a policy.
• Instagram will not ask for your password in an email. If it does, the email is fake.
• Check the address bar before logging in anywhere. Official Instagram pages use instagram.com.
• Report phishing emails to Instagram using the report option in the message or in the Help Center.

Avoid recovery scams: no one can 'hack' your account back

This part matters as much as the recovery steps. Whenever an account is hacked, a wave of opportunists appears: accounts named "Instagram Support" send DMs, paid services promise to recover any account for a fee, and "ethical hackers" on forums claim they know someone inside Meta. All of it is a scam. Legitimate recovery is free, and it happens through Instagram's own flows. Meta will never ask for your password or a two-factor code in a DM, and no honest person needs them to help you.

• Never pay a recovery service or a hacker. They will take your money and disappear, or blackmail you later.
• Never share your password or a two-factor code with anyone. No exceptions, no matter who they say they are.
• Fake "Instagram Support" accounts on Instagram, X, and Telegram exist only to trick you. Report and block them.
• Phishing pages that look like the Instagram login screen are common. Always check the address bar before typing anything.
• Anyone who claims they can get into someone else's account is breaking the law — and will likely use your account next.

Frequently asked questions

If your Instagram account was hacked, act now, not later: check the old inbox for the revert email, use instagram.com/hacked, and complete identity verification if asked. Once you're back in, change your password, turn on two-factor authentication, and remove anything the hacker added. And remember the rule that never changes: real recovery is free, it happens inside Instagram, and no legitimate person will ever ask for your password or your two-factor code. Stay calm, follow the official steps, and don't let the scammers win a second time.