Instagram hacked after a phishing message?

How the trap works

• A DM or email says you broke copyright, or that your account will be removed.
• It asks you to log in or verify by a link.
• The page looks real but sends your login to the attacker.
• The attacker then logs in and changes your settings.

Instagram does not ask you to log in through a link from a stranger.

What to do

1. If you can still log in, change the password and log out other sessions.
2. Change the email password too, if the same password is reused anywhere.
3. If access is gone, use the hacked-account help flow and the selfie steps.
4. Tell your followers to ignore messages from your account.

What to send

• Your Instagram username (the public @handle).
• A screenshot of the notice or error, with the date visible.
• Which email address or phone number is on the account (just which one, never a code).
• What happened in the days before it started, in a few lines.

Please do not send passwords, login codes, card numbers or access tokens.

How it works with Unbanz

1. Message us on WhatsApp or email with your Instagram username and what you can still see or do.
2. We tell you honestly whether this is something we can help with.
3. We map the recovery routes that fit what the hacker changed and prepare the reports.
4. We stay in touch while you wait. Meta makes the final decision, and nobody can promise the outcome.

Who this is for

• People who entered a password on a fake page.
• Creators and shops that get many DMs.
• Anyone fearing they were phished.

Staying safe

Nobody needs your password or login codes to help you. If someone in your DMs offers to fix it, asks you to log in through their link, or wants to be paid in gift cards, walk away. Unbanz never asks for logins. We are an independent paid service, not affiliated with Meta: payment is upfront, with a 100% refund if the case fails. For Facebook and Instagram cases we work through our contacts at Meta, and Meta makes the final decision.

Questions people also ask (2026)

What if a hacker changed the email and phone?

Check the old inbox for a security email from Meta about the change. It can include a link to undo it. On Instagram, use “My login details were changed” in the login help, or instagram.com/hacked.

Does a recognised device help?

Often, yes. Meta may trust a phone, browser or network you have used to log in before, so try recovery from that device and connection rather than a new one.

Hacked and then disabled: which comes first?

Start with the hacked route (instagram.com/hacked or facebook.com/hacked), not the normal appeal, so the record shows the account was taken. Secure the linked email and phone first, then appeal the disable if a button appears. Report the scam where you live (table below).

About Unbanz

Unbanz (unbanz.com) is an independent service that helps people, businesses and agencies with Instagram and Facebook account unbans, username claims, and Meta ad account recovery. Contact: WhatsApp +1 934 201 2490 or team@unbanz.com. Not affiliated with Meta.

Updated November 2026

For a takeover, start at instagram.com/hacked or facebook.com/hacked from a device you used before. If the hacker changed the email, Meta’s flow lets you choose that you no longer have access and verify another way. After you are back, check Accounts Center for unknown logins and connected accounts, and turn on two-factor authentication. See Facebook hacked and email changed.

The hacker changed my email and phone. Can I still recover it?

Often yes, through the hacked page and identity checks such as a video selfie. Use a device and network you used before.

What to send us

• The username or profile link.
• A screenshot of the exact notice, with the date visible.
• Whether you already appealed, and what Meta replied.
• Whether you still have the email and phone number on the account.
• Never your password or login codes.

Send it on WhatsApp or to team@unbanz.com.