Few things feel worse than discovering your Facebook or Instagram account has been taken over. Hackers may change your password, email and phone number, message your friends asking for mobile money, or post scams in your name. In Uganda this is common, especially for business pages and accounts with many followers.
The good news: many accounts can be recovered if you act quickly and use only official tools.
Signs your account has been hacked
- Your password no longer works
- You receive an email saying your email address or phone number was changed
- Friends report strange messages from you asking for money or links
- Posts, stories or ads appear that you did not create
- Your business page has a new admin you do not know
Step 1: Check your email first
When someone changes your login email, Meta usually sends a message to your old email address from security@facebookmail.com or Instagram's security address. That email often has a link saying "revert this change" or "secure your account". Click it as soon as possible. This is often the fastest way back in.
Step 2: Use the official recovery pages
For Facebook
- Go to facebook.com/hacked on a phone or computer you have used before.
- Choose the option that describes your situation, for example "Someone accessed my account without permission."
- Enter your email, phone number or username and follow the instructions.
- If asked, upload ID or take a video selfie to confirm your identity.
For Instagram
- On the login screen, tap "Forgot password" or "Get help logging in."
- Enter your username, email or phone number.
- If you cannot access the email or phone, choose "Need more help" or visit instagram.com/hacked.
- Follow the steps, which may include a video selfie for accounts with photos of you.
Tip: try recovery from the same phone and Wi-Fi or data network you usually use. Meta trusts familiar devices more.
Step 3: Once you are back in, secure everything
- Change your password to a long, unique one you have never used elsewhere.
- Check your email and phone number in Accounts Center and remove any you do not recognise.
- Log out of all other devices from the "Where you are logged in" section.
- Turn on two factor authentication, preferably with an authenticator app rather than SMS.
- Review page and business admins. Remove unknown people from your page, Meta Business Suite and ad accounts.
- Check ad accounts and payment methods for charges you did not make.
- Remove suspicious apps connected to your account.
- Tell your friends and followers that the account was hacked and that any money requests were fake.
Warn your contacts immediately
While you work on recovery, ask family to post or message on your behalf that your account was hacked. In Uganda, hackers often send messages like "Please send me 200k on mobile money, I will refund tonight." Ask people to call you on the phone before sending any money.
Beware of recovery scammers
Many people online claim they can "recover any account" for a fee. Most are scammers who will take your money or hack you again. Meta does not charge for account recovery, and you should never share your password or verification codes with anyone.
How accounts get hacked
- Phishing links: fake pages that look like Facebook asking you to log in, often sent as "Your page will be deleted" or "copyright violation" messages.
- Code sharing scams: someone asks you to forward a code that was "sent to you by mistake." That code is your login code.
- Reused passwords: the same password used on many sites gets leaked and tested on Facebook.
- Malicious apps and browser extensions.
- SIM swap: criminals take over your phone number to receive SMS codes.
Prevention checklist
- Use a password manager or unique passwords for every account.
- Enable two factor authentication with an authenticator app.
- Save your recovery codes somewhere safe offline.
- Never log in through links in messages. Type the address yourself or use the app.
- Add a second trusted admin to your business page.
- Keep your email account secure, because it is the key to everything.
Frequently asked questions
How long does Facebook recovery take?
Sometimes minutes, sometimes several days if identity checks are needed. Check your email regularly, including spam.
Can I report a hacked account to police?
Yes. If money was stolen or your identity used for fraud, report to police and keep screenshots as evidence.
My account was disabled after the hack. What now?
Follow the appeal link in the disabled account notice and provide accurate information. Avoid creating many new accounts while the appeal is pending.
Need hands on help?
If your business page or ad account was hacked, a verified digital marketing or IT security expert on The Quick Consult can guide you through recovery and lock down your accounts.