AwareXone

Hacked Facebook account? How to recover it

At a glance

If your Facebook account was hacked, secure your email first, then look in your old inbox for Meta's security email and use its link to reverse the change. If that fails, go to facebook.com/hacked on a device you have used before. Only Meta can restore the account.

A hacked Facebook account usually shows up the same way: your password stops working, the email or phone number on the account has changed, or friends tell you your profile is sending links. The first hour matters, and the fastest way back is often your old inbox.

This page gives the order of steps that works for most cases. If they fail, or the account runs a Page or ads, you can ask for a case review.

What to do first if your Facebook account is hacked

  1. Secure your email first. Whoever controls your email can reset every other account again. Change the email password and sign out other sessions.
  2. Check your old inbox, including spam. When an email address on Facebook is changed, Meta sends the previous address a message with a link to reverse the change. Check the sender before you click, and use it straight away.
  3. If there is no link, go to facebook.com/hacked on a phone or computer you have logged into Facebook with before, and follow the steps.
  4. If you cannot reach the old email or phone, use Meta's "No longer have access to these?" route and follow the identity checks with new contact details.
  5. Warn friends from another channel not to send money or codes to "you". Take screenshots of the messages sent from your account.
  6. Once you are back in, change the password, log out unknown devices, turn on two-factor authentication and review Page roles and ad accounts.

The full walk-through, with a table of what you see and what it means, is in Facebook hacked and email changed: what to do first.

Signs that your Facebook account is hacked

  • Your password no longer works and reset codes go to an email or number you do not recognise.
  • Facebook asks for a two-factor code you never set up.
  • Messages, posts or ads appear that you did not create.
  • You were removed as admin of a Page, or ad charges appear on your card.

If ads are charging your card, call your card issuer now. See Facebook hacked and ads charged to your card.

What not to do after a hack

  • Do not pay anyone who promises to "hack back" your Facebook account. Unauthorised access is a crime, and most of these offers are scams. See hiring an "ethical hacker" to recover an account.
  • Do not share a login code, password or backup code with anyone, including people claiming to be platform staff.
  • Do not click links in direct messages or emails warning that your Facebook account will be deleted. Open the app yourself instead.
  • Do not trust phone numbers that claim to be platform support. Meta, for one, says it has no general public support phone line.

When professional help with a hacked Facebook makes sense

Most hacked Facebook accounts are won back through the platform's own recovery flow, so try that first and never pay anyone to "hack it back". Getting help is worth considering when you have already tried those routes, lost access to both the email and the phone number, or the account carries a business, ads or income. If you also run a Page or a business account, see Facebook Page recovery and Business Manager recovery.

AwareXone reviews your case, helps you prepare ownership evidence and works only through Facebook's official routes. We never ask for your password, login codes or session cookies, and we do not break into accounts. Only Facebook can restore access, so no outcome is guaranteed. AwareXone has handled 1,300+ account recovery and removal cases, with client names kept anonymous. Fees are confirmed after the case review.

Use Apply for Case Review and tell us the platform, what changed and what you have already tried. We reply within five hours, 9am to 11pm Malaysia time, every day.

If money was lost or you are being blackmailed

Call your bank first and report to the police or cybercrime authority in your country. In Malaysia, call the National Scam Response Centre on 997 and see how to report a hacked account in Malaysia. Reporting does not replace the platform's own recovery process, but it supports your case and gives you a reference number.

Help by country: UK, Australia, UAE and Singapore.

Limitations

AwareXone is an independent service provider. We are not affiliated with, endorsed by, or employed by Meta, Instagram, TikTok, X, YouTube, Snapchat, or other platforms unless explicitly stated.

Platform decisions remain under the control of the relevant platform. AwareXone provides documentation, support, reporting, and escalation assistance where appropriate.

We will never ask for your social media password, 2FA code, authentication cookie, or recovery code.

Related services

Account Recovery. Hacked, locked, disabled, or suspended social accounts. Case assessment and recovery assistance. Or return to the social media account recovery hub.

Common questions

How do I recover a hacked Facebook account if the email was changed?

Look in your original inbox, including spam, for a security email from Meta with a link that reverses the email change. If it is missing or fails, go to facebook.com/hacked on a device you have used before, then use Meta's route for accounts where you cannot reach the email or phone.

Can AwareXone get my hacked Facebook account back?

Only Meta can restore access. We review the case, help you prepare ownership evidence and use Meta's official routes. We never ask for your password, codes or cookies, and no outcome is guaranteed.

Is there a Facebook phone number I can call?

Meta says it has no general public customer service phone number. Numbers claiming to be Meta support are potentially scams. Use the official help flows instead.

How long does Facebook account recovery take?

It depends on the route. Reversing an email change from the security email can take minutes. Identity checks and appeals can take days or longer, and Meta decides each one.

What should I do if my hacked Facebook account is also running ads?

Call your card issuer to block the card and dispute charges, pause any campaigns you did not create if you can reach Ads Manager, and note every charge. Then work on recovery.

Case review

Need help with a social media account in Malaysia? Apply for Case Review.