# Facebook Business Portfolio Recovery for Owners > Locked out of Meta Business Suite or a portfolio? Secure the personal profile, open Business Support Home, then fix People access. - URL: https://www.awarexone.com/research/facebook-business-account-portfolio-recovery-owners - Author: Md Shariar Shanaz Shuvon, Founder & CEO, AwareXone - Published: 2026-11-08 - Topics: Facebook, Business Manager, Malaysia - Related service: Business Manager recovery: https://www.awarexone.com/business-manager-recovery ## Short answer If you are locked out of a Facebook business portfolio, secure the personal profile first, open Business Support Home yourself, review People and asset access, remove unknown admins, check Business Support Home account status (formerly Account Quality), and treat portfolio recovery as distinct from personal profile recovery. ## Summary - Owner recovery starts with the personal Facebook profile that owns the portfolio, not a cold Business Suite lookalike site. - Meta Business Help covers Business Support Home and adding people to a business portfolio. - Malaysian SME owners who left ads to an agency often discover they cannot open Business Suite after staff change or hack. - This guide is owner portfolio recovery, not phishing-domain spotting alone or personal Facebook recovery alone. - One wrong step can cost you the account, so know what you are doing before you start. Business Suite will not open. The agency left. An unknown admin sits on the portfolio. Ads still spend. The personal Facebook login may be fine while the business side is not. Meta's [About Meta Business Support Home](https://www.facebook.com/business/help/254088759757736) and [Add People to a Business Portfolio](https://www.facebook.com/business/help/2169003770027706) Help explain Official support and access control. [Phishing help](https://www.facebook.com/help/www/166863010078512) covers fake restore sites. This guide is owner portfolio recovery. For spend theft see [Meta Business Manager hacked ad spend chargeback](https://www.awarexone.com/research/meta-business-manager-hacked-ad-spend-chargeback). For lookalike phishing domains see [Meta Business Suite lookalike phishing domains](https://www.awarexone.com/research/meta-business-suite-lookalike-phishing-domains). For Malaysia BM hacked context see [Facebook Business Manager hacked Malaysia](https://www.awarexone.com/research/facebook-business-manager-hacked-malaysia). One wrong step can cost you the account, so know what you are doing before you start. Last checked: 8 November 2026. ## Quick Answer If you are locked out of a Facebook business portfolio, secure the personal profile first, open Business Support Home yourself, review People and asset access, remove unknown admins, check Business Support Home account status (formerly Account Quality), and treat portfolio recovery as distinct from personal profile recovery. ## Owner Recovery Checklist *Owner recovery checklist by AwareXone, based on Meta Business Help (read 8 November 2026).* | Step | Owner action | Why it differs from personal recovery | Stop if | | --- | --- | --- | --- | | Personal profile first | Secure the Facebook login that should own the portfolio | Portfolio tools inherit that login's risk | You only chase Business Suite URLs | | Business Support Home | Open Support Home from a typed or bookmarked Official URL | Real Meta business support starts here | A cold DM sends you elsewhere | | People and assets | Review People access and which Pages, ad accounts and catalogues each person holds | Agency staff changes show up here | You add a stranger who offered help | | Unknown admin removal | Remove finance editors and admins you did not appoint | Stops ongoing spend theft | You wait weeks without a screenshot trail | | Business Support Home account status | Check Business Support Home account status (formerly Account Quality) for restrictions on assets | Portfolio limits can exist while personal profile looks fine | You create a second portfolio to dodge a restriction | | Portfolio versus personal | Keep personal hacked recovery and portfolio access work on separate notes | Mixing them confuses appeals and staff | You file the wrong Help path for the symptom | ## Ordered Owner Steps 1. Confirm you can open the personal Facebook profile that should own the business. 2. Change that password and review login sessions if a contractor may still be inside. 3. Open Meta Business Support Home yourself using an Official Help URL. 4. Export or screenshot People access before you remove anyone. 5. Remove unknown admins and finance roles carefully, one asset at a time. 6. Check Business Support Home account status (formerly Account Quality) for restricted Pages or ad accounts. 7. If the personal profile is also hacked, run personal recovery in parallel with clear notes. > Warning: **Lookalike Business Suite sites.** Owners searching portfolio recovery hit fake Meta domains. Type Business Support Home yourself. See [Meta Business Suite lookalike phishing domains](https://www.awarexone.com/research/meta-business-suite-lookalike-phishing-domains). ## What Only Meta Can Decide Meta decides portfolio restrictions and support outcomes. Your part is clean People access and Official Support Home cases. Keep a printed list of who should hold admin on each ad account after agency exits. Pause large campaigns until unknown finance editors are removed. Tell finance to watch bank alerts for unexpected Meta charges the same day. Do not share portfolio admin with a recovery seller who messaged you on a chat app. After access returns, require unique logins for each staff member instead of shared passwords. Write down the exact on-screen wording before you screenshot so later appeals match what the platform showed on the day you acted. Tell close contacts through another channel that your account may send odd links until the situation is stable. Prefer official help URLs you type yourself rather than buttons inside unexpected emails or DMs. Keep a simple timeline with Malaysia time stamps for every password change, appeal and public warning. If a platform offers only a limited number of reviews, use them carefully and attach only evidence you can defend. After access returns, review connected apps and remove anything you do not recognise before you resume normal posting. Teams should nominate one owner for the case so staff do not file conflicting appeals from different logins. Ignore anyone who messages you offering a paid clear or a private tool. Stay on official help pages you open yourself. Do not share your password, codes or session cookies with anyone who contacts you about this case. Keep screenshots of every notice with the date in Malaysia time so later support chats match what you saw. Wording can vary by app and region. If you already paid a stranger who promised a restore, stop further payments and move to bank and police reporting the same day. Document which devices still have an active session so you can sign them out in order once you regain control. A calm checklist beats rushing a second account that can create more policy problems. Share only the facts your staff need. Over-sharing passwords in a group chat creates a second incident. Schedule a short debrief after access returns so the same bait does not work on the next shift. Update internal playbooks with the exact Help Centre titles you used, including the read date. Check that billing cards tied to the account still belong to you after the incident settles. Rehearse a calm public statement that avoids inventing timelines you cannot prove. Close the loop with anyone who received a scam message from your account during the outage. Move sensitive work to a dedicated browser profile without random extensions when possible. Prefer daylight hours for sensitive resets so more staff can watch the process. If a lesson or quiz appears after a lock, complete only the official in-app flow. Do not celebrate early if a temporary feature returns while a deeper appeal is still open. Remove leftover recovery codes from screenshots before you file them in email. Ask whether any contractor still has an active session on a personal phone. When vendors ask for status, give them a single approved sentence rather than conflicting replies. Keep a written timeline of every password change and appeal with Malaysia time stamps. For facebook business account portfolio recovery owners, keep the official sources folder beside your screenshots. Store Help Centre titles with the read date in your incident folder so later staff use the same pages. If a contractor caused the lockout, collect their last access time before you reset anything else. Refuse remote-desktop offers from anyone who claims they can finish recovery faster. After the case closes, rotate passwords on the email inbox that protects the social login. Keep one shared status sentence for customers so support agents do not invent timelines. Review whether backup codes sit in a password manager only you control before the next incident. If ads or Shop stayed live during the outage, reconcile spend and orders the same day access returns. Nominate a single staff member to talk to platforms so appeal wording stays consistent. Save PDF copies of Official Help pages you relied on, including the date you opened them. If a notice mentions linked accounts, list every brand login that might be affected before you appeal. Do not post speculative blame on public feeds while a review is still open. When access returns, confirm two-factor methods still reach devices you control. Keep bank and ads billing alerts visible during the first week after a restore. ## When It Is Safer to Get Expert Help Getting help is safer when unknown finance editors already spent, when Business Support Home account status blocks assets, or when personal and portfolio lockouts overlap. Wrong DIY admin adds deepen the theft. If you are unsure about any step, or the portfolio matters to your income, having an experienced team check it is the safer choice. AwareXone does this work. Reply within 60 seconds, 24 hours a day, every day. See our [Business Manager recovery](https://www.awarexone.com/business-manager-recovery) page. ## When a Case Review Makes Sense A case review helps when portfolio access, ad spend and phishing overlap. We are a Malaysia-based team, independent of Meta, and we use only the official routes. We do not ask for your password or codes, and we cannot promise a result. See our [trust page](https://www.awarexone.com/trust). ## Frequently Asked Questions ### I can open Facebook but not Business Suite. What now? Secure the personal profile, then open Business Support Home and review People access on the portfolio. ### Where is Official Meta business support? Use About Meta Business Support Home on Meta Business Help you open yourself. ### Should I build a second portfolio today? Avoid creating parallel portfolios to dodge restrictions. Fix access and Business Support Home account status first. ### Is this the same as personal Facebook recovery? No. Portfolio People access and Business Support Home account status are business-side steps. ### What if an agency still has admin? Screenshot People access, remove roles you did not approve, and document dates. ## Official sources - [Official: About Meta Business Support Home, Meta Business Help Centre (read 8 November 2026)](https://www.facebook.com/business/help/254088759757736) - [Official: Add People to a Business Portfolio and Assign a Business Asset, Meta Business Help Centre (read 8 November 2026)](https://www.facebook.com/business/help/2169003770027706) - [Official: About Meta Business Support Home, Meta Business Help Centre (read 8 November 2026)](https://en-gb.facebook.com/business/help/254088759757736) - [Official: Protect yourself from phishing on Facebook, Facebook Help Centre (read 8 November 2026)](https://www.facebook.com/help/www/166863010078512) --- AwareXone is an independent provider serving clients worldwide, not affiliated with any platform. The platform makes the final decision on every account. AwareXone never asks for passwords, OTP codes, backup codes or session cookies.