Account Recovery: Do It Yourself or Get Professional Help?

Your Facebook, Instagram or Google account is out of reach, and now you are weighing two options. Keep fighting the recovery screens yourself, or pay someone who says they can sort it out. Your feed is probably full of people offering exactly that.

The short answer: start yourself. The official routes are free, and the platforms build them for the owner, not for a middleman. Outside help is worth considering only when those routes have stopped making sense, and even then it works through the same routes.

This guide compares what you can do alone with what genuine help adds, explains what nobody outside the platform can do, and gives you a checklist for telling real help from a recovery scam. The same do-it-yourself-first approach works on other platforms too, such as our guide to recovering a hacked Snapchat account.

Last checked: 5 October 2026.

#Should You Recover Your Account Yourself or Get Help?

Do it yourself first, in almost every case. Check your old inbox for the platform's security email and use the link that reverses the change, then go through the platform's own recovery flow: facebook.com/hacked for Facebook, the login link and support request for Instagram, or Google's account recovery page. Consider outside help when those routes keep looping, when the email, phone and two-factor settings were all changed, or when a business or income depends on the account. Help of any kind is best effort, it never involves handing over a password or code, and only the platform decides whether the account comes back.

#Doing It Yourself and Getting Help, Side by Side

The useful question is which parts of the job need the owner, which benefit from experience, and which nobody outside the platform can touch.

#The Official Routes to Try First

These routes cost nothing and are where any genuine helper would start anyway. Try them in order, on a device you have logged in with before.

1. Search your old inbox, including spam, for the platform's security email. Facebook's hacked account page says that when an email changes, it sends the previous address a special link to reverse the change. Instagram's hacked account help says an email from [email protected] may let you undo the change with "secure my account".
2. For Facebook, go to facebook.com/hacked. Meta recommends using a device you have logged in with before. Its account recovery page also points to Meta's Account Recovery and Support Hub, with options for a hack, a forgotten password and lost access to the email or phone.
3. For Instagram, tap "Forgot password?" and choose "Send login link". If the link does not work, Instagram says you may be able to request support from a mobile device, using a secure email that only you can access.
4. For Instagram support requests, expect an identity check. For an account with photos of you, Instagram asks for a video selfie turning your head; for one without, it asks for the sign-up email or phone and the type of device you used.
5. For Google, use the account recovery page and follow Google's recovery tips: answer every question rather than skipping, take your best guess, use a device, browser and place where you usually sign in, and type old passwords exactly.

Two Google details save people a lot of grief. Google's account recovery page says wrong guesses will not kick you out and there is no limit to the number of attempts. It also says a change to recovery details can take up to 7 days to take effect, so trying again a few days later is sometimes the right move.

#Meta Verified Support: Help From the Platform Itself

If you are a creator or business that already subscribes to Meta Verified, the first outside help to use is Meta's own. Its Meta Verified support page says active subscribers get human agents through chat and email, with priority handling and phone callbacks on some higher plans, and that this covers account access and security issues.

• It is only for active subscriptions on a profile that has completed verification, which Meta's subscription page describes as a separate application and review.
• Chat support runs in the Instagram and Facebook mobile apps, not on computers, and Meta says it may not work in mobile browsers.
• Chat and email support are offered in Malay and Chinese as well as English.
• Keep the case ID. Meta says a case closes automatically if you do not reply to the agent within 7 days, and a closed case cannot be reopened.

If you do not subscribe, Meta's page on phone support says Meta has no general public phone number for customer service and that numbers claiming to be Meta support are potentially scams. Our guide on using Meta Verified support after a hack covers that route in more detail.

#What Outside Help Can Add

Genuine help adds judgement and organisation, not access. The forms are the same for everyone, but someone familiar with them can spot problems a first-time owner may miss.

• Triage. Working out whether you face a hack, a disable, a lock or a mix, because each one has its own route and the wrong route wastes time.
• Evidence organisation. Putting the security emails, login alerts, old receipts and screenshots in date order, so every request tells the same story.
• Catching repeat mistakes. Requesting codes again and again, switching devices between attempts, or giving different details in different requests.
• Linked accounts. Untangling a case where the email, the Facebook profile, a Page, an Instagram account and an ad account were all taken together.
• An honest read. Telling you plainly when a legitimate path is still open, and when it is not.

Most of this you can also do yourself with patience. Our checklist of what to gather before a recovery case is a good place to start whether or not you ever ask anyone.

#What Outside Help Cannot Do

Nobody outside the platform can restore an account, speed up a reviewer or skip a check. Anyone who says otherwise is describing something that is either against the platform's rules or not real.

• You complete every step. The video selfie, the login link and the code sent to your phone all need the owner, so a helper guides you rather than acting as you.
• Nobody needs your password, a one-time code or your backup codes. Google says plainly that it never asks for passwords or verification codes by email, phone call or message.
• There is no private line. Google says you cannot call it for help signing in and that it does not work with any service claiming to provide account or password support.
• Help is best effort. The platform makes the final decision, and some accounts are not restored however well the case is prepared.

#Is It Worth Paying for Account Recovery?

It depends on what you would actually be paying for. Paying for someone's time to review and organise a difficult case can make sense. Paying for a promised result never does, because nobody outside the platform can deliver one. Work through these questions in order.

1. Is the security email with the reverse link still in your old inbox? If yes, use it now. You do not need anyone.
2. Have you tried the platform's own flow on a familiar device, following every prompt? If not, do that first.
3. Do you subscribe to Meta Verified on the affected Facebook or Instagram profile? If yes, open a case with Meta's support before anyone else.
4. Did the attacker change the email, the phone and the two-factor method, and are the official routes now looping? If yes, a second opinion may help.
5. Does a business, ad account, shop or income depend on the account, or were several accounts taken together? If yes, structured help is easier to justify.
6. Has the platform already given a final refusal after a proper request? If yes, be wary of anyone who says they can reverse it.

Our sibling guide on the signs that it is time to get help goes through those situations one by one.

#How to Tell Real Help From a Recovery Scammer

Fake recovery offers usually arrive first: a comment under your post, a DM, or a profile calling itself a hacker, often soon after you ask for help in public. They may write in English, Bahasa Malaysia or Chinese. Use this checklist before you reply to anyone.

The US Federal Trade Commission's page on refund and recovery scams describes the same pattern for people who have already lost money: an upfront charge, a claim to represent an official body, and pressure to pay by cryptocurrency, gift card, wire transfer or payment app. It says legitimate organisations do not promise you will get your money back. Our guide to fake hackers offering account recovery shows how the scam usually plays out.

#If You Already Paid a Scammer or Shared a Code

Deal with the money first. The government's NSRC 997 page says to call the NSRC hotline on 997 within 24 hours of discovering a scam so authorities can try to block the transactions, then contact your bank and make a police report at the nearest station.

• If you shared a code, change the password on the email account linked to the social account, then sign out of every session you do not recognise.
• Keep the chat history, the profile link, the account number you paid into and the payment receipt. Do not delete the conversation.
• Report the scam account to the platform from inside the app.
• Report a phishing page or intrusion to CyberSecurity Malaysia's Cyber999 centre, which takes reports by online form, email, phone and its mobile app.

#When a Case Review Makes Sense

If you have read this far and tried the official routes properly, you already have what most people need. A review makes sense when those routes keep looping, when several linked accounts or a business page are involved, or when you want an honest opinion before spending more time. SocialSafe by AwareXone, our recovery service, looks at your case before anything is agreed and works only through official platform processes. Sometimes the honest answer is that you can finish it yourself, and we will say so. Our guide to how a social media account recovery service works explains what a review involves. You can see how cases are handled on our social media problem solutions page, and our Trust Center sets out what we never ask for, starting with your password and codes.

#Frequently Asked Questions