Business Social Media Account Recovery in Malaysia

Your company's Facebook Page is posting crypto offers, the shop's Instagram no longer accepts your password, or the marketing executive says the TikTok Business Center has thrown everyone out. Customers are already asking whether the giveaway in your name is real.

The short answer: find out which layer was taken, secure the people behind it, then use the one official route that fits that layer. Business accounts on Meta and TikTok are reached through personal logins, so a stolen account is almost always a stolen person's login.

This guide is for Malaysian business owners and the staff who run their social media. It maps each platform's official route, lists the ownership evidence to prepare, and covers customer warnings and reporting in Malaysia.

Last checked: 5 October 2026.

#How Do You Recover a Hacked Business Social Media Account in Malaysia?

Start with people, not the brand account. Everyone who manages the Page, portfolio or Business Center secures their own login, email and two-factor authentication. Then use the route for the layer you lost: Meta's form to recover a hacked Page, Meta Business Support Home for a compromised business portfolio, instagram.com/hacked for an Instagram professional account, and your TikTok account manager or TikTok customer support for a Business Center. If no legitimate admin is left, prepare identification, a signed attestation letter and an ownership document for Meta's dispute process. In Malaysia, report the intrusion to Cyber999, and call your bank or the NSRC on 997 first if money was taken. Only the platform can restore access.

#Which Layer Did Your Business Lose?

"Our account was hacked" can mean four different things, and each has a different door. Work out which one applies before you contact anyone. Screen labels vary by app version and region, so match on the meaning, not the exact words.

#The First Hour: A Runbook for a Small Team

This is stressful, and several people will want to act at once. Give one person the job of coordinating, and work in this order:

1. List everyone who had admin or full control on each Page, portfolio, Instagram account and Business Center, including agencies and former staff.
2. Each of those people secures the email behind their login first: new password, and remove forwarding rules they did not create.
3. Each changes their platform password, turns on two-factor authentication and logs out of devices they do not recognise.
4. Call the bank on the card linked to your ad accounts if you see charges you did not approve.
5. Screenshot everything with the date visible: new admins, unknown campaigns, posts, charges and any phishing message that started it.
6. Only then open the platform route from the table above, from a device and network you normally use.

Meta says business portfolio compromises typically happen when an individual account is hacked or reached through malware or phishing, and it asks owners to scan and clean the devices of everyone with access (Meta Business Help Centre). Skip that and the attacker may simply return.

#Facebook Pages and Meta Business Portfolios

For a Page, Meta's hacked Page recovery article calls its form the best thing to do, and Meta updates you by email. The form only works if you are logged in and recently lost access, and Meta acts only when it can confirm the Page was compromised. If you cannot log in at all, Meta sends you to facebook.com/hacked first.

For the wider portfolio, Meta's guidance on a hacked or compromised business portfolio lists the signs: users or admins added without approval, new or reactivated ad accounts, unexplained spend and posts that do not look like yours. It tells you to contact Meta Support immediately. Support for businesses runs through Meta Business Support Home, which Meta's phishing page also names as the place to check your real account status (Facebook Help Centre).

If the portfolio has no legitimate admin left, Meta publishes a separate page on how to request full control of a business portfolio. Read it before you start a support chat. Our guide to a hacked Facebook Business Manager walks through the portfolio clean-up in more depth.

For a Page where the person holding full control will not or cannot hand it back, Meta's Page admin dispute applies. Meta says to ask that person first, and lists when you may be eligible:

• The person with access was a previous employee or contractor.
• The person with access has died, and you can provide a death certificate.
• The only person with access accidentally removed themselves.
• The Page is a Location Page with a parent Page as the admin.
• There is a third-party dispute over business ownership, with a court order.

A dispute is not a hack report. If your Page was taken by an attacker, use the hacked Page form. If a former staff member simply never handed over access, see our guide on a former employee holding the company's accounts.

#Instagram Business and Creator Accounts

Instagram professional accounts recover through the same routes as personal ones. Instagram's hacked account page sends anyone who has lost control to instagram.com/hacked. Its recovery article adds three steps worth trying in order:

1. Check the inbox of the email address on the account for a message from [email protected] about an email change, and select "secure my account" in it.
2. On the login screen, tap "Forgot password?" and request a login link to the email or phone on the account.
3. If that fails, request support from a mobile device and give a secure email only you can access.

This is where business accounts often differ. Instagram says that for an account without photos of you, it asks for the email or phone you signed up with and the type of device you used at sign up. For an account with photos of you, it asks for a video selfie. A shop account showing only products falls in the first group, so find out early who created it and on which phone. Our guide to an Instagram business account hack covers the rest. If brand deals or sponsorships are now at risk because of the hack, our guide to protecting brand deals after a creator account hack covers that side specifically.

#TikTok Business Accounts and Business Center

TikTok's Business Center security page explains that the Business Center grants full control over your business on TikTok, including adding or removing members and deleting the business. On a compromise, TikTok says it will suspend the account to secure it, investigate, tell you the result and how to regain control, and process reimbursements for charges caused by unauthorised activity.

• Managed clients: contact your TikTok account manager immediately.
• Unmanaged clients: contact TikTok customer support immediately.
• Meanwhile, every admin secures their own login and two-step verification.

TikTok also recommends at least two Business Center admins so one loss does not lock you out. If your main TikTok app account was taken as well, our TikTok business account guide separates the app login from the Business Center.

#Ownership Evidence Checklist

Platforms work from what you can show. Meta's Page admin dispute, for example, needs three unaltered documents in PDF, JPEG or PNG, and you cannot proceed without all three. Prepare this set once and keep it for every platform:

• Identification for the person making the request. Meta says the name must match the person signing the documents.
• A signed attestation letter on letterhead with the business name, address, phone number and logo, the Page ID and URL, the requester's profile URL and email, the reason for the request and a declaration that it is true.
• One official ownership document from Meta's accepted list in the exact business name, such as a utility bill, a bank letter or a trademark document.
• The IDs and URLs of every Page, portfolio, ad account, Instagram account and Business Center involved.
• The names of legitimate admins, and when each person was added or removed.
• A short timeline: when you last had access, what changed, and what you have done since.
• Dated screenshots, bank alerts, and any case or reference numbers the platform sent.

#Telling Customers About Scam Messages in Your Name

Attackers often use a business account to sell fake vouchers, collect deposits or send phishing links to followers. Your customers trust the name, so a short warning protects them and your reputation.

1. Post the warning on channels you still control: your website, email list, other social accounts and your shop counter.
2. Say plainly that the account is compromised, that you are not running any giveaway or deposit offer, and that you will never ask for codes or payment through direct messages.
3. Give one official way to check whether a message is genuine, such as your website contact page.
4. Ask anyone who paid to contact their bank and the NSRC on 997, and keep their reports for your timeline.
5. Remove the warning only once you have control back and have checked admins, posts and ads.

#Reporting the Intrusion in Malaysia

CyberSecurity Malaysia lists the cases it handles as the primary agency, including account compromise, impersonation, phishing, business email compromise, and it also lists social media recovery among its services. PDRM is named as the supporting or referral agency, for fraud where there is a criminal element (CyberSecurity Malaysia). You can report to its Cyber999 incident response centre by online form, email, phone or the Cyber999 app.

If money left a business or customer account, act on the money first. The NSRC's FAQ on the NFCC website says to contact your bank's 24-hour hotline or the NSRC on 997 immediately, then make a police report at the nearest station. Bring the timeline, transaction details, the links used and screenshots of the conversations.

#Fake Meta Partners and Recovery Agents: Red Flags

A takeover attracts offers. Some come from people who promise a contact inside Meta or TikTok, some from agencies that use a partner badge as proof they can restore accounts. Meta says that even if you have Meta Verified or other support, its hacked Page form is still the fastest way to recover a Page, so a claimed status is not a shortcut. Meta also says its representatives never ask for money, passwords or payment details over chat or email.

• Asks for a password, login code, backup code or remote access to your phone.
• Promises a result, a deadline or a guarantee of any kind.
• Claims a private contact at the platform, or offers to break into the attacker's account.
• Wants payment before anyone has looked at what happened.
• Contacts you first, in English, Bahasa Malaysia or Chinese, after you posted about the hack.
• Sends a Business Manager partner request or appeal link. Meta warns that phishing partner requests can arrive from its real facebookmail.com domain.

Legitimate help looks different. It starts with a review of your case, works only through the official forms and support routes in this guide, never needs your secrets, and says honestly that the platform decides and some accounts are not restored.

#Mistakes That Slow a Business Recovery

• Cleaning up the portfolio while an admin's personal login is still compromised.
• Opening new support cases for the same problem instead of replying in the existing thread.
• Removing the last person with full control, which can leave a Page with nobody able to manage it.
• Filing a Page admin dispute for what was really a hack, or the reverse.
• Sending ownership documents in a name that does not match the account.
• Leaving former staff, agencies and unknown partners on the account after access returns.

#When a Case Review Makes Sense

Many owners recover their accounts alone with the routes above. A second pair of eyes helps when several platforms are affected at once, when no legitimate admin remains, when the ownership paperwork does not match the account name, or when revenue depends on the account coming back. SocialSafe by AwareXone, the recovery service of AwareXone, a Malaysian company, reviews the case before anything is agreed and tells you whether an official route is still open. Read how we approach business and creator recovery, and our Trust Center sets out what we never ask for, starting with your passwords and codes.

#Frequently Asked Questions