Facebook hacked account recovery starts at facebook.com/hacked. Facebook’s help page says to open facebook.com/hacked on a device you have used to log into that profile before. Type the address yourself. Do that before you try a form someone sent you in a message.
A hack and a disable are different screens. This page is the hack. If the login says the account is disabled, use Facebook account disabled after you secure the email.
Secure the email before the reset
The person who can read the email on the account receives the password reset. If the hacker can read it, the reset goes to them.
On a computer you trust:
- Open the email you used for Facebook. If you see sign-in alerts you do not recognize, change that email password and turn on the extra sign-in check from the email provider.
- Search for mail from Facebook about an email change, a password change, or a new login. Save those messages. They are your timeline.
- If Facebook already wrote that the email on the profile was changed, use the link in that message while it still works.
- If you cannot open the old inbox at all, recover the email first. A Facebook link to a dead inbox does not help you.
Write down the old email and the old phone number, even if they were changed. The recovery form asks what used to be on the account.
Use Facebook’s hacked page
Open facebook.com/hacked in a browser, on a device you have logged in with before. Enter the name, email, or phone that belongs to the profile. Follow the steps on the screen. Type any code yourself. A code is a key. It is not something you forward.
Facebook can ask for an ID or a video to confirm you are the person on the profile. Do that check inside Facebook. Do not email a passport photo to an address from a comment, and do not send it to us. We never ask for ID scans.
If the flow ends on “We disabled your account” or “We suspended your account,” stop and appeal from that notice. In the text box, say the profile was hacked, the date you lost it, and that you want the decision reviewed. Submit once. Watch the email you just secured.
A linked Instagram account can be in the same mess. Check it. If Instagram shows its own notice, follow Instagram hacked recover.
After you are back in
Do this in one sitting.
- Set a password you have never used on another site.
- Log out other sessions from security settings.
- Turn on two-factor authentication. Save the backup codes offline, not in a Facebook message.
- Check the email, phone, and trusted contacts on the profile. Put back anything you did not change.
- Open Accounts Center and look at the linked Instagram profile.
- Remove apps you do not recognize. Those apps are a common way in.
Tell friends if the profile sent them strange links. A one-line note is enough once the account is locked down.
People who offer to log in for you
A hacked profile attracts messages. Some of them will say they can get in today if you send the password, a six-digit code, or a photo of your ID. That is how a second person takes what the first person took. Facebook does not do support in random DMs. UnbanPro does not either.
What we do is prepare and file the appeal when the hack turned into a disable or a suspension. Send the name on the profile and a screenshot of the notice. The review is free. It takes a few days. We file through Meta’s own official channels. We open support chats, send follow-up emails, and push the case hard until it gets looked at.
The steps are on how it works. Start a case on the contact page, or message us on WhatsApp. Leave every password and every code out.
Related reading