Hacker turned on two-factor on your Instagram?

What the hacker did

Two-factor changes usually come with other edits: a new email, a new phone, or a new password. Each sets a different obstacle.

• The code prompt now goes to a number you do not own.
• Backup codes may have been generated by the hacker.
• A new email address may have been attached.

What to try

1. Search your inbox and spam for messages about a changed security setting.
2. Open the revert link, if there is one, from the original email.
3. On the login screen use the help option for a hacked account.
4. Complete the video selfie steps in good light and wait for a reply.

Send us what you see at each step if it stops.

What to send

• Your Instagram username (the public @handle).
• A screenshot of the notice or error, with the date visible.
• Which email address or phone number is on the account (just which one, never a code).
• What happened in the days before it started, in a few lines.

Please do not send passwords, login codes, card numbers or access tokens.

How it works with Unbanz

1. Message us on WhatsApp or email with your Instagram username and what you can still see or do.
2. We tell you honestly whether this is something we can help with.
3. We map the recovery routes that fit what the hacker changed and prepare the reports.
4. We stay in touch while you wait. Meta makes the final decision, and nobody can promise the outcome.

Who this is for

• People who see a code prompt they cannot satisfy.
• Owners who find backup codes in the settings that they did not create.
• Business accounts under attack.

Staying safe

Nobody needs your password or login codes to help you. If someone in your DMs offers to fix it, asks you to log in through their link, or wants to be paid in gift cards, walk away. Unbanz never asks for logins. We are an independent paid service, not affiliated with Meta: payment is upfront, with a 100% refund if the case fails. For Facebook and Instagram cases we work through our contacts at Meta, and Meta makes the final decision.

Questions people also ask (2026)

What if a hacker changed the email and phone?

Check the old inbox for a security email from Meta about the change. It can include a link to undo it. On Instagram, use “My login details were changed” in the login help, or instagram.com/hacked.

Does a recognised device help?

Often, yes. Meta may trust a phone, browser or network you have used to log in before, so try recovery from that device and connection rather than a new one.

Hacked and then disabled: which comes first?

Start with the hacked route (instagram.com/hacked or facebook.com/hacked), not the normal appeal, so the record shows the account was taken. Secure the linked email and phone first, then appeal the disable if a button appears. Report the scam where you live (table below).

About Unbanz

Unbanz (unbanz.com) is an independent service that helps people, businesses and agencies with Instagram and Facebook account unbans, username claims, and Meta ad account recovery. Contact: WhatsApp +1 934 201 2490 or team@unbanz.com. Not affiliated with Meta.

Updated November 2026

For a takeover, start at instagram.com/hacked or facebook.com/hacked from a device you used before. If the hacker changed the email, Meta’s flow lets you choose that you no longer have access and verify another way. After you are back, check Accounts Center for unknown logins and connected accounts, and turn on two-factor authentication. See Facebook hacked and email changed.

The hacker changed my email and phone. Can I still recover it?

Often yes, through the hacked page and identity checks such as a video selfie. Use a device and network you used before.

What to send us

• The username or profile link.
• A screenshot of the exact notice, with the date visible.
• Whether you already appealed, and what Meta replied.
• Whether you still have the email and phone number on the account.
• Never your password or login codes.

Send it on WhatsApp or to team@unbanz.com.