Facebook Account Locked for Unusual Activity: What to Do

You open Facebook to reply to a customer and get a screen saying your account has been locked. Your password worked yesterday. Now there is one button, "Get started", and you are not sure whether pressing it will help or make things worse.

Pressing it is the right move. A lock is a security hold, not a punishment: Facebook suspects someone else may have used the account and wants you to prove it is you. Expect an identity check and, often, a 24-hour wait.

This guide covers the unlock step by step, a missing or looping button, Messenger locks, what "This account is not available" usually means, and the scams that copy the lock notice.

Last checked: 29 September 2026.

#What Does "Your Account Has Been Locked" Mean on Facebook?

It means Facebook noticed activity that did not look like you and paused the account until you confirm your identity. Meta's page on unlocking your Facebook account says that if it sees unusual activity, it might lock the account for security, and that you will get an email or see a message when you log in. To unlock it, open Facebook, select "Get started" and follow the on-screen steps, which may include confirming your identity. If you cannot log in at all, the same page points you to account recovery instead. A lock is not a suspension, so there is no appeal and no deadline.

#Which Situation Are You In?

Several Facebook screens look alike. The wording varies by app version, language and region, so match the meaning rather than the exact words.

If your screen says suspended, see our walkthrough of the Facebook suspension appeal instead.

#How to Unlock Your Account, Step by Step

The unlock happens inside Facebook. There is no separate form or email address. At the time of writing, the flow looks like this:

1. Update the app, or use a browser you have logged in with before, and log in as usual.
2. Screenshot the lock screen, then tap "Get started".
3. Follow each prompt. Facebook may send a code to the email or phone on the account or ask for details such as your date of birth. The steps differ between accounts.
4. If a screen shows a login or change you do not recognise, say it was not you.
5. If offered a password change, pick a password you have never used anywhere else.
6. If Facebook tells you to wait before logging in, stop and come back later.

Meta's page on confirming your identity says it asks for a security check when it thinks the account's security might have been affected. Two details trip people up. The date of birth it wants is the one you gave at sign-up. And if you cannot answer a security question, you may be able to pick a different one or try again later.

Some people are asked for a video selfie. If that step fails, see our guide to a Facebook video selfie that is not working.

#Why Is There a 24-Hour Wait After the Security Check?

It is a deliberate delay, and it means the check went through. Meta's page on the 24-hour wait says that after a security check you have to wait 24 hours to log in, as an extra precaution. Your friends can still see your profile during that day, but you cannot use it.

Do not start a fresh recovery on another device or request more codes in the meantime; it will not shorten the wait. Note the time, set a reminder and log in once the day has passed.

#When the Code Does Not Arrive

Most stalled unlocks come down to a code that never lands. Meta's unlock page suggests these checks:

• Codes can arrive late. If you have requested several, wait a day before trying again.
• Check you are looking at the right inbox or number, including old ones.
• Look in spam, and in your phone's blocked or filtered messages.
• Check your signal and that the phone has space for new SMS, then restart it.
• Ask your carrier whether your plan can receive the type of message Facebook sends.

In Malaysia, that last step matters for lapsed prepaid lines. If your phone suddenly shows no service at the same time as the lock, call your carrier from another phone straight away: a number moved to another SIM would let someone else receive your codes.

#The "Get Started" Button Is Missing or Keeps Looping

Meta publishes no help page for a missing button or a looping check, so treat these as practical troubleshooting rather than an official fix.

• Update the app, or switch to a browser on a computer you have used for Facebook before. Some checks load in one and not the other.
• Turn off private browsing. Meta's page on two-factor authentication notes that if the browser clears its history or stops Facebook remembering it, you may be asked for a security code every time you log in.
• If the loop began after you finished a check, you may simply be inside the 24-hour wait. Leave it for a day.
• If you cannot get past the login screen at all, stop working on the lock and use the recovery route below.

#If You Cannot Log In to Unlock It

If your password no longer works, or an email says your email or phone changed and it was not you, recovery comes before the unlock.

1. Look in your old inbox for Facebook's email about the change. Meta's page on recovering a hacked account says it sends a message with a special link to the previous address, and that link can reverse the change.
2. Go to facebook.com/hacked and follow the steps. Meta recommends doing this on a device you have used to log in before.
3. If you no longer have the email or phone, use the find your account page at facebook.com/login/identify on a familiar device. Meta's page on recovering without your email or phone says to choose "No longer have access to these?" and that any new contact details you give must not have been used on the account before.
4. Once you are back in, open "Where you're logged in" under Password and security and log out every session you do not recognise. Meta's page on logging out of other devices shows where that is.

Our guide to recovering a Facebook account in Malaysia covers each route, and what to do when it fails, in more depth.

#Locked Because of Advanced Protection

Some accounts lose features not for a suspected hack but because Facebook wants stronger login security first. Meta's page on Advanced Protection says it is required for some higher-risk accounts, such as people in business portfolios that advertise with Meta, civic figures, and accounts linked to Pages or profiles with a large following.

Those accounts are told by email and on Facebook. You comply by turning on two-factor authentication or creating a passkey under Password and security, then Advanced Protection. Meta says that without setup you may lose access to certain features or the account, and required accounts cannot opt out. For a Malaysian small business whose Page and ads hang off one admin profile, clear this first.

#Messenger Account Locked

Messenger runs on your Facebook account, so a Messenger lock is usually the Facebook lock showing up in another app. Meta's Messenger account recovery page sends locked accounts to the Facebook help, and its page on being unable to log into Messenger says to update the app, then use Facebook's login help.

Unlock through Facebook, then log back into Messenger. If Messenger says suspended or disabled instead, that is an enforcement decision with its own appeal.

#What "This Account Is Not Available" Usually Means

Owners see this on their own profile link, and friends see it when opening the owner's page. Meta publishes no page quoting the exact wording, and it differs between Facebook and Messenger, so read it alongside what else you can see.

• The account is locked. Meta says that during the 24-hour wait your friends can still see the profile, so a lock alone does not usually hide it.
• The account is suspended or disabled. Meta's Messenger help page on suspensions says a suspended or disabled account is not visible to anyone.
• The owner deactivated it. Meta's page on deactivation says no one else can see the profile, though Messenger can stay active.
• The owner blocked the person looking. Meta's page on blocking says a blocked profile cannot see your posts or start a conversation with you.

If friends say your profile has vanished and you never deactivated it, log in and read whatever notice appears. If you cannot log in, treat it as a possible takeover and follow the recovery steps above.

#Scams That Copy the Lock Notice

Scammers imitate the lock screen. A fake email or Messenger message says your account is locked or will be deleted, and links to a page asking for your password and login code. Others comment on your posts, in English, Malay or Chinese, offering to "buka akaun" for you.

Meta's page on checking whether an email is really from Facebook lists its sending domains, such as facebookmail.com and meta.com, and warns about misspelled look-alikes. You can confirm a message under Password and security, then Recent emails. If it is not there, do not trust it.

The government's NSRC 997 hotline page says the line runs 24 hours and asks victims to call within 24 hours of discovering a scam, so banks can act on the transactions. For a phishing page or a hacked account with no money lost, CyberSecurity Malaysia's Cyber999 service takes incident reports by online form, email and phone. Our explainer on the fake Meta support scam shows the common scripts.

#Mistakes That Keep an Account Locked

• Starting a new recovery on another phone while the 24-hour wait is running.
• Requesting codes again and again instead of waiting a day.
• Entering the birthday now on the profile rather than the one you signed up with.
• Using an incognito window or a phone Facebook has never seen.
• Typing a code into a page you reached from a message.

#When Expert Recovery Help Makes Sense

Most people clear a lock on their own with the steps above. A second opinion helps when the account runs your business Page or ads, when a takeover and a lock have landed together, or when every route has looped back to the same screen. SocialSafe by AwareXone, our recovery service, reviews what you have already tried and tells you honestly which official route is still open, using the same Meta processes described here. Our Facebook account recovery service explains how the review works, and our Trust Center lists what we will never ask you for, starting with your password and codes.

#Frequently Asked Questions