# Facebook Group Hacked and Admin Removed: What to Do

> Removed as admin of your own Facebook group? Why it happens, how to secure your profile, who can restore your role, and the scams aimed at group admins.

- URL: https://www.awarexone.com/research/facebook-group-admin-removed-hacked
- Author: Md Shariar Shanaz Shuvon, Founder & CEO, AwareXone
- Published: 2026-09-29
- Topics: Facebook, Account recovery, Malaysia
- Related service: Facebook account recovery: https://www.awarexone.com/social-media-recovery/facebook-account-recovery

## Short answer

Secure your own Facebook profile first, through facebook.com/hacked on a device you have used before, and log out unknown sessions. Facebook has no recovery form for groups, so ask a trusted admin who still has access to invite you again. If the group now posts scams, report it. Only Meta and remaining admins can change roles.

## Summary

- Meta says an admin usually loses a group because another manager changed their role, because their own account was hacked, or because the group was taken down.
- Secure your own Facebook profile first through facebook.com/hacked on a device you have used before, then log out every session you do not recognise.
- Facebook has no dedicated recovery form for groups, so the realistic way back is a trusted admin who still has access and can invite you again.
- If the takeover admin is posting scams or harmful content, report the group from its Options menu so Facebook reviews it against its Community Standards.
- Ignore messages warning that your group broke the rules and asking you to log in through a link, and never pay anyone who offers to reassign the group.
- Only Meta and the remaining admins can change group roles, some hijacked groups are never returned, and trusted co-admins are the best protection.

You built a Facebook group over years: a taman residents group, a jual beli group, an alumni or hobby community. Today you open it and your admin badge is gone. A name you do not know is now the admin, the rules have changed, and members are messaging you to ask why the group is posting links.

The short answer: secure your own Facebook profile first, then ask any admin or moderator you still trust to restore your role. Facebook does not offer a group recovery form the way it does for Pages, so the people who still manage the group matter more than any appeal. If the new admin is using the group to scam members, report the group.

This guide covers why admins lose groups, which route fits your situation, groups left without admins, and the fake messages behind most takeovers.

Last checked: 29 September 2026.

## What Should You Do If You Were Removed as Admin of Your Own Group?

Work out whether your own account was hacked or whether someone else in the group changed your role. If there are signs your profile was used by someone else, recover it through Facebook's [hacked account page](https://www.facebook.com/help/1216349518398524) on a device you have logged in with before, change your password, and log out sessions you do not recognise. Then contact the remaining admins and moderators from a channel you control and ask an admin to invite you again. If the group is now being used for scams, report it from the group's Options menu. Nobody outside Meta, including AwareXone, can reassign a group's admins for you.

## Why Did I Lose Access to My Facebook Group?

Meta's help page on [why you cannot access your Facebook group](https://www.facebook.com/help/162352087930365) gives admins and moderators three reasons: someone who helps manage the group changed your role, your account was hacked, or the group was taken down. In practice the first two often happen together. An attacker gets into one admin's profile, then uses that admin's powers to remove everyone else.

That works because of how group roles are split. Meta's page on [the difference between admins and moderators](https://www.facebook.com/help/901690736606156) says only admins can make someone an admin or moderator, remove an admin or moderator, and change settings such as the group name, cover photo and privacy. Moderators can approve members and posts, remove posts and comments, and remove or ban people, but they cannot touch roles. So a hijacker needs just one admin account to take the whole group.

There is one detail worth knowing. Meta's page on [removing an admin or moderator](https://www.facebook.com/help/1718782575010160) says group creators cannot be removed by another admin; a creator can only remove themselves or leave. If you created the group and you are no longer an admin, check your own account before anything else. The change may have been made from inside your profile.

## Which Situation Are You In?

Match what you see to one row, then follow that route. Facebook's screens and labels vary by app version, language and region, so match on the meaning rather than the exact words.

*Ways an admin loses a Facebook group and the first step for each, based on Facebook Help Center pages at the time of writing.*

| What you see | What it probably means | What to do first |
| --- | --- | --- |
| You can still log in, but you are now a plain member or have been removed from the group | Another admin, possibly a hijacked one, changed your role | Check your own account for hack signs, then ask a trusted admin to invite you as admin again |
| Your password stopped working, or you see posts, messages or a profile picture you did not make | Your own profile was taken over, and your admin role with it | Recover the profile at facebook.com/hacked, then deal with the group |
| You created the group, and you are no longer an admin | Meta says another admin cannot remove a creator, so your profile may have been used, or you left by mistake | Review your account's sessions and recent activity before contacting anyone |
| The group has disappeared or shows a message that it was disabled | Facebook took the group down for Community Standards violations | If you are still an admin, appeal through "See details" within 30 days |
| A stranger is admin and the group now posts scam links or fake giveaways | The group is being used to reach your members | Warn members from another channel and report the group to Facebook |

## Step One: Secure Your Own Facebook Profile

Your group role lives on your personal profile. Until that profile is safe, anything you fix in the group can be undone. Meta's page on [recovering a hacked account](https://www.facebook.com/help/203305893040179) lists the signs: a changed profile picture, posts or messages you did not write, trouble logging in or a two-factor method that stops working, login alerts you did not trigger, and emails saying your email, phone or password changed.

1. Go to facebook.com/hacked yourself, ideally on a phone or computer you have used to log in to Facebook before.
2. If Facebook emailed you about an email change, look for that message in your old inbox. Meta says it sends a special link there that lets you reverse the change.
3. Change your password, and change the password of the email account linked to Facebook as well.
4. In Accounts Center, open "Password and security", then "Where you're logged in". Meta's page on [logging out of other devices](https://www.facebook.com/help/174571515935086) shows how to select unfamiliar sessions, or all of them, and log them out.
5. Turn on two-factor authentication. Meta's page on [how two-factor authentication works](https://www.facebook.com/help/148233965247823) lists a security key, an authentication app or SMS codes, and says you can get 10 recovery codes. Store those offline.

If the attacker has already changed the email and phone on your profile, the route is longer. Our guide to [a Facebook account hacked with the email and phone changed](https://www.awarexone.com/research/facebook-hacked-email-phone-changed) walks through it.

## Step Two: Get a Trusted Admin to Restore Your Role

This is the realistic way back. Meta's page on [adding an admin or moderator](https://www.facebook.com/help/148640791872225) says only admins can invite someone to become an admin or moderator. The invite goes from the group's Members or People tab: Options next to your name, then "Invite as admin", then "Send invitation". Meta adds that members must be active in the group to be made an admin.

- Contact the other admins by phone or in person, not through the group, where the hijacker can read everything.
- Ask them to check their own accounts first. If one admin was phished, others may have received the same message.
- Once a trusted admin is secure, they can remove the hijacker's admin role from the same Members menu, then invite you again.
- Moderators cannot restore admins, but they can remove scam posts and ban accounts in the meantime.
- If the hijacked account is the group creator's, another admin cannot remove it. The creator has to recover their profile first.

> Note: **No dedicated group recovery form.** At the time of writing, we could not find a Facebook help page or form for reclaiming a group from a hijacking admin, the way Meta offers a hacked Page form for Pages. Meta's own group help points admins to role changes by other admins, account recovery and the takedown appeal. Be wary of anyone who claims to know a secret group form.

## Step Three: Report the Group If It Is Being Misused

If no trusted admin is left and the new admin is using the group to post scams, reporting is the lever you have. Meta's page on [reporting a group to Facebook](https://www.facebook.com/help/266814220000812?locale=en_GB) says to open the group, click "Options" below the cover photo, select "Report group", choose what is wrong, then click "Done". Facebook then reviews content in the group against its Community Standards and sends the result to your Support Inbox.

Meta says a report does not mean the group will be removed, and removal would not return it to you. A report protects members; it does not give you the group back. Ask members to report individual scam posts too.

## What If the Group Was Disabled or Is Left Without Admins?

A takeover can end with the group disabled, because the new admin posted or approved rule-breaking content. Meta's page on [appealing a disabled group](https://www.facebook.com/help/584914935354562/?locale=en_GB) says Facebook may disable a group after multiple admin and moderator violations. An admin appeals by going to facebook.com/groups, choosing the group, clicking "See details" next to the disabled message and selecting "Request review". Admins have 30 days. If the option is missing, Meta says another admin may already have appealed, or the violation may not be appealable.

Groups with no admins at all follow a different rule. Meta's page on [groups without admins](https://www.facebook.com/help/1869148786729750) says that if the only admin leaves, deactivates or deletes their account, they are prompted to invite a new admin, and the group is automatically paused if nobody is chosen or nobody accepts within seven days. If the only admin's account is memorialised, the group is paused within seven days.

## The Fake Messages That Start Most Group Takeovers

Most group hijackings start with one admin opening one message. Meta's page on [suspicious messages claiming to be from Facebook](https://www.facebook.com/help/225602007465207) lists false claims that you broke its Community Standards and warnings that something will happen to your account unless you act. Group admins get versions saying the group will be deleted, sometimes written in Bahasa Malaysia or Chinese, with a link to an "appeal" page that steals the login.

- Meta's page on [protecting yourself from phishing](https://www.facebook.com/help/217910864998172) says genuine Facebook or Meta email only comes from domains such as fb.com, facebook.com, facebookmail.com, meta.com and metamail.com, and their subdomains.
- The same page says Meta representatives will never ask for money, passwords or payment details over chat or email.
- Real enforcement notices appear inside Facebook, under Group status or your Support Inbox. Check there instead of tapping a link.
- Browser extensions are a quieter route in. Meta's page on [removing browser add-ons](https://www.facebook.com/help/331057463663666) says an extension with permission to read or change website data can view or change your Facebook information while you are logged in. Remove any you do not recognise.

Our breakdown of [the fake Meta support scam](https://www.awarexone.com/research/fake-meta-support-scam-malaysia) shows the message formats and the phrases these scammers use in Malaysia.

## Mistakes That Make a Group Takeover Worse

- Paying the hijacker, or anyone who promises to reassign the group through Meta. Nobody outside Meta can do that.
- Buying an established group to replace the one you lost. You cannot know whose group it was before it was sold.
- Creating a lookalike group to pull members across. It confuses members and looks like the impersonation you are fighting.
- Fixing the group before fixing your profile, so the attacker simply removes you again.
- Letting the 30-day window for a disabled group appeal pass while you argue with the hijacker.
- Sharing a login code or recovery code with anyone who offers to help.

## Evidence to Gather Now

- The group name and URL, plus dated screenshots of the current admins and moderators.
- Screenshots of posts, rule changes or name changes the hijacker made.
- Facebook emails about password, email or phone changes on your profile, and any login alerts.
- The phishing message or link that started it, kept but not opened again.

## If Members Lost Money or You Shared a Code in Malaysia

Hijacked groups are often used to sell fake products or push fake giveaways to members who trust the group's name. The government's [NSRC 997 page](https://www.malaysia.gov.my/en/categories/safety-and-community/cybersecurity/nsrc-997-hotline) asks victims to call within 24 hours of discovering a scam, so authorities can act on bank accounts and transactions, then contact their bank and make a police report at the nearest station. Post a warning to members from a channel the hijacker cannot edit, and point anyone who paid to 997.

You can report the phishing link that took your account to CyberSecurity Malaysia's [Cyber999 incident response centre](https://www.cybersecurity.my/portal-main/services/cyber999-overview), which takes reports by online form, email, phone and its mobile app. If your phone suddenly shows "No service" while Facebook codes stop arriving, call your carrier from another phone and ask whether your SIM was replaced.

## How to Protect the Group Once It Is Back

- Keep at least two or three admins you know in person, each with two-factor authentication turned on.
- Give moderator roles to people who only manage posts and members, and remove admins who have gone quiet.
- Check Group status regularly so you see enforcement notices inside Facebook, not in a stranger's email.

If you also run a Facebook Page, the rules there are different and there is a dedicated form. Our guide to [a hacked Facebook Page with the admin removed](https://www.awarexone.com/research/facebook-page-hacked-admin-removed) covers that process.

## When a Case Review Makes Sense

Most group takeovers are resolved by securing the admin's profile and one trusted co-admin restoring roles, and only Meta and the group's admins can change who manages it. Some hijacked groups are never returned. A second opinion helps when the hacked profile has lost its email and phone, when every admin was removed, or when the group supports a business. SocialSafe by AwareXone, our recovery service, looks at the case before anything is agreed and tells you plainly whether an official route is still open. You can read how we approach [Facebook account recovery](https://www.awarexone.com/social-media-recovery/facebook-account-recovery), and our [Trust Center](https://www.awarexone.com/trust) explains what we will never ask for, starting with your password and login codes.

## Frequently Asked Questions

### Can Facebook give me back my group if the hacker removed me as admin?

Facebook's group help does not describe a form for restoring an admin removed by another admin. The realistic routes are recovering your own profile and asking a remaining admin to invite you again.

### Will reporting the group get it deleted?

Facebook reviews the group's content against its Community Standards and tells you the result in your Support Inbox. A report does not mean the group will be removed, and removal does not return it to you.

### What happens if the only admin leaves or deletes their account?

Meta says that admin is prompted to invite a new admin. If nobody is chosen or nobody accepts within seven days, the group is automatically paused.

### Group facebook kena hack dan admin dibuang, apa perlu dibuat?

Selamatkan akaun Facebook anda dahulu melalui facebook.com/hacked, kemudian minta admin lain yang dipercayai menjemput anda semula sebagai admin. Jangan bayar sesiapa yang menjanjikan group itu dikembalikan.

## Official sources

- [Facebook Help Center: Why you can't access your Facebook group (read 29 September 2026)](https://www.facebook.com/help/162352087930365)
- [Facebook Help Centre: What happens when a Facebook group doesn't have any admins (read 29 September 2026)](https://www.facebook.com/help/1869148786729750)
- [Facebook Help Centre: Add an admin or moderator to your Facebook group (read 29 September 2026)](https://www.facebook.com/help/148640791872225)
- [Facebook Help Centre: Remove an admin or moderator from your Facebook group (read 29 September 2026)](https://www.facebook.com/help/1718782575010160)
- [Facebook Help Center: Difference between admin and moderator of a Facebook group (read 29 September 2026)](https://www.facebook.com/help/901690736606156)
- [Facebook Help Centre: Appeal Facebook's decision to disable your group or remove content (read 29 September 2026)](https://www.facebook.com/help/584914935354562/?locale=en_GB)
- [Facebook Help Centre: Report a group to Facebook (read 29 September 2026)](https://www.facebook.com/help/266814220000812?locale=en_GB)
- [Facebook Help Center: Recover a hacked account (read 29 September 2026)](https://www.facebook.com/help/1216349518398524)
- [Facebook Help Center: Recover your Facebook account if you were hacked (read 29 September 2026)](https://www.facebook.com/help/203305893040179)
- [Facebook Help Center: Log out of Facebook on another device (read 29 September 2026)](https://www.facebook.com/help/174571515935086)
- [Facebook Help Center: How two-factor authentication works on Facebook (read 29 September 2026)](https://www.facebook.com/help/148233965247823)
- [Facebook Help Center: You got a suspicious email or message claiming it's from Facebook (read 29 September 2026)](https://www.facebook.com/help/225602007465207)
- [Facebook Help Center: Protect yourself from phishing on Facebook (read 29 September 2026)](https://www.facebook.com/help/217910864998172)
- [Facebook Help Center: Removing browser add-ons or extensions (read 29 September 2026)](https://www.facebook.com/help/331057463663666)
- [MyGOV Malaysia: NSRC 997 Hotline (read 29 September 2026)](https://www.malaysia.gov.my/en/categories/safety-and-community/cybersecurity/nsrc-997-hotline)
- [CyberSecurity Malaysia: Cyber999 Cyber Incident Response Center (read 29 September 2026)](https://www.cybersecurity.my/portal-main/services/cyber999-overview)

---

AwareXone is an independent Malaysia-based provider, not affiliated with any platform. The platform makes the final decision on every account. AwareXone never asks for passwords, OTP codes, backup codes or session cookies.