Look for the reversal email
When the email address on an Instagram account changes, Instagram sends a notification to the old address. That message normally includes an option to revert the change and secure the account. Search your inbox and spam for messages from Instagram around the time you lost access. Act on it quickly – these links can expire.
Use instagram.com/hacked
If you cannot find the email or the link no longer works, go to instagram.com/hacked. Choose the option saying your account was hacked or that you no longer have access to the email or phone. Instagram may let you request a code to a different email or number you control, or start identity verification.
Identity verification
If the account contains photos of you, Instagram may ask for a video selfie. If not, it may ask questions such as the original email or phone used to sign up and the device you created the account on. Answer accurately; guesses can slow things down.
If your email was hacked too
If the attacker got into your email first, recover that account through your email provider before anything else, change its password, turn on two-factor authentication and remove unknown forwarding rules. Otherwise the attacker may take Instagram back again.
Once you are back in
- Change your password and turn on two-factor authentication with an authenticator app.
- Check the email, phone, username and bio, and restore your own details.
- Remove unfamiliar devices under Accounts Center > Password and security.
- Delete posts, stories and messages the attacker sent and warn followers.
- Remove connected apps you do not recognise.
Don’t fall for “hacker for hire” offers
People promising to “hack back” your account are almost always scammers, and paying them can put you at further risk. Do not share login codes with anyone. Our guide to recovery scams explains the common patterns.
Act in the right order
Speed matters, but order matters more. A practical sequence:
- Secure your email account first if there is any chance it was compromised.
- Search for Instagram’s security email to the old address and use its reversal option.
- If that fails, start instagram.com/hacked and request a code to an email or phone you control.
- Complete verification once, carefully.
- As soon as you are in, change the password, enable two-factor authentication and remove unknown sessions.
Jumping between methods or repeating requests quickly can trigger extra security checks and slow you down.
Warn your followers
Attackers often use a stolen account to message followers with fake investment offers, giveaway links or requests for login codes (“I sent you a code by mistake, can you send it back?”). Ask friends on another platform to ignore messages from your account until you confirm you are back, and to report anything suspicious. This also protects their accounts from the same attacker.
Business and creator accounts
If the account is connected to a Facebook Page, a shop or an ad account, check those assets as soon as possible. Remove unknown admins in Business Settings, check payment methods and look for ads you did not create. A compromised profile is a common route into ad accounts – see Meta ad account disabled for unusual activity.
Related situations
For a general overview of compromised accounts, see our hacked Instagram account guide. If the account was disabled after the hack, see Instagram account disabled. If you remain locked out, our Instagram account recovery service can take it from there, with a fixed quote first – Meta makes the final decision.
Official sources
Meta updates its help pages and flows often. Always follow the wording on your own notice and the current official Help Center. Unbanz is an independent service and is not affiliated with Meta, Instagram or Facebook.