# Facebook Hacked, Then Flagged Under 13: What Is Left > Hacked, then Facebook said you are under 13 and you cannot request another review? See what that notice means and which official routes may still apply. - URL: https://www.awarexone.com/research/facebook-hacked-then-classified-under-13-cannot-request-review - Author: Md Shariar Shanaz Shuvon, Founder & CEO, AwareXone - Published: 2026-11-10 - Topics: Facebook, Hacked account, Age check, Disabled account - Related service: Facebook account recovery: https://www.awarexone.com/social-media-recovery/facebook-account-recovery ## Short answer If Facebook classified you as under 13 after a hack and says you cannot request another review, the normal appeal has closed. Report the takeover through Facebook's hacked account flow, use any Instagram age appeal still offered, and if you live in the EU, consider a certified dispute settlement body. Ignore anyone offering to restore it for you. ## Summary - Meta's help page says a permanently disabled account cannot request another review, so the wording usually means the standard appeal route has closed. - A takeover and an age decision are different problems, so report the hack through Facebook's hacked account flow on a device you used before. - If Instagram shows an under 13 review, its help page describes an appeal with a valid ID, and that review may take up to 30 days. - People in the EU can ask a certified dispute settlement body to review some Meta decisions, though those bodies cannot impose a binding result. - Do not open a new account to replace the old one, because Meta lists misrepresenting identity to deceive or avoid enforcement as a disable reason. Someone took over your Facebook account. Soon after, Facebook told you it had classified you as under 13, and the final notice says "You cannot request another review of this decision." Instagram and Threads may have gone with it. You are an adult, you have years of photos and contacts on that profile, and the message reads like the end of the road. One wrong step can cost you the account, so know what you are doing before you start. This guide separates the hack from the age decision, explains what the notice means in Meta's own words, and lists the official routes that may still apply. Last checked: 10 November 2026. ## Quick Answer If Facebook classified you as under 13 after a hack and says you cannot request another review, the normal appeal has closed. Report the takeover through Facebook's hacked account flow, use any Instagram age appeal still offered, and if you live in the EU, consider a certified dispute settlement body. Ignore anyone offering to restore it for you. ## What This Looks Like in a Real Case [The Desert Trail reported](https://www.hidesertstar.com/deserttrail/29-palms-artist-seeks-answers-after-alleged-facebook-hack-locks-her-out-of-20-years/article_85ae9654-2df0-439b-826e-69a3b26f4b30.html) on 9 November 2026 that a California artist lost access to Facebook, Instagram and Threads after her account was compromised on 16 September 2026. According to her account in the report, someone uploaded fake ID documents in her name three times, Facebook then appeared to classify her as under 13, and she was told she could not request another review. The report says Meta's recovery tool did not recognise her verified email and number, a mailed letter and a privacy request did not bring the profile back, and an EU dispute body said the appeal had to be filed from inside the EU. Treat this as one reported case. Your notices may differ. ## Which Notice Are You Seeing? Meta uses several similar messages. The route that is still open depends on which one you have. Quote the exact wording you see, because notices vary by app, region and device. *Notice map by AwareXone based on Facebook and Instagram help pages (read 10 November 2026). Exact wording varies.* | Wording you see | What Meta's help pages say it means | Route that may still apply | | --- | --- | --- | | "We've suspended your account" | A suspension you can appeal within 180 days; the window varies by region | Log in and follow the appeal prompt | | "We've disabled your account" | Disabled, sometimes without a suspension first for severe violations | Check whether an appeal prompt still appears at login | | "You won't be able to request another review" or similar | The account is permanently disabled after the window closed or an appeal failed | Hack report, EU dispute body if eligible | | Instagram: "You're not old enough to use Instagram" | The Instagram account is under review for being under 13 | Instagram's appeal with a valid ID | ## What Cannot Request Another Review Means Facebook's help page on [suspended or disabled accounts](https://www.facebook.com/help/103873106370583) says you can appeal a suspension within 180 days, and that the period varies by region. It then says: "If you don't appeal within 180 days or if your appeal isn't successful, your account will be permanently disabled. You won't be able to request another review of the decision." It also notes that Meta may disable an account without suspending it first in severe or time-sensitive cases. So the notice is not a glitch. It tells you that, from Meta's side, the standard review has finished. That does not prove the decision was right, but it does mean that pressing the same button again or writing a fresh appeal through unofficial channels is unlikely to reach anyone. ## Step 1: Report the Hack Separately The age decision may have been triggered by what the attacker did, so the takeover is its own report. Facebook's [hacked account guide](https://www.facebook.com/help/1216349518398524) says to visit the [hacked account flow](https://www.facebook.com/hacked) on a device you have used to log in to Facebook before. Use your usual browser and network if you can. 1. Open the hacked account flow from a device you have logged in on before. 2. Follow the prompts to say your account was compromised. 3. Use the contact details you had on the account when asked. 4. Keep every security email from Meta, including any about new emails, passwords or ID uploads you did not make. 5. Write a dated timeline: when you last had access, when the alerts arrived, and when each notice appeared. Also secure the email account linked to Facebook, since that is often where a takeover starts. Our guide to the [first 24 hours after a hack](https://www.awarexone.com/research/hacked-account-what-to-do-first-24-hours) covers that order of steps. ## Step 2: Use the Instagram Age Appeal If It Is Offered Instagram's page on [why it asks for your date of birth](https://www.facebook.com/help/instagram/366075557613433) says that if your account is under review for being under 13, you will see "You're not old enough to use Instagram" and the account will be removed unless you appeal. Its appeal asks you to follow the on-screen instructions and submit a valid ID, and the review may take up to 30 days. If Meta finds a mistake, it says the account will be restored. Instagram's page on [confirming your age](https://help.instagram.com/966909308115586) adds that age checks can use your date of birth, photo ID or a video selfie through Yoti, and that this information is not shown on your profile. If you still see an age prompt on any linked app, use it with your real ID. See our guide to the [Instagram age verification appeal](https://www.awarexone.com/research/instagram-age-verification-appeal) for that route in detail. ## Step 3: EU Residents Can Ask a Dispute Body The European Commission's page on [out-of-court dispute settlement bodies](https://digital-strategy.ec.europa.eu/en/policies/dsa-out-court-dispute-settlement) explains that under the Digital Services Act, users can ask a certified body to review a platform's moderation decision, including decisions restricting accounts. It says these bodies cannot impose a binding settlement, but platforms must engage with them in good faith. The page lists the certified bodies and the platforms each one covers. In the reported case above, the body said the request had to come from inside the EU, so check eligibility first. ## What Not to Do - Do not open a new account to replace the old one. Meta's disabled account page lists misrepresenting your identity to deceive others or avoid enforcement as a reason accounts are disabled. - Do not upload someone else's ID or an edited document. Use only your own real ID through Meta's own prompt. - Do not reply to messages offering to restore the account through Meta staff. - Do not send repeated letters or forms with the same content. Keep one clear record instead. > Warning: **Official routes are free.** Facebook's hacked account flow, Instagram's age appeal and the EU dispute route are free to start. Anyone who promises to reverse a final decision, or asks for your password, login codes or backup codes, is not working for Meta. Learn how to [spot fake recovery services](https://www.awarexone.com/research/account-recovery-scams-how-to-spot-fake-recovery-services). ## What Only Meta Can Decide Only Meta can reverse a permanent disable or accept an age appeal. A dispute body can give an opinion, but Meta's help pages do not promise a further review once the final notice appears. Some accounts in this position are not restored. That is why a clear, dated record matters: it is the strongest thing you can bring to any route that is still open. ## When It Is Safer to Get Expert Help This is one of the hardest Meta cases. It mixes a takeover, a false age signal and a final notice, across several linked apps. The real risks are plain: using the wrong form wastes time, an ID uploaded in the wrong place can add confusion, and a replacement account can make matters worse. If you are unsure about any step, having an experienced team review your case is the safer choice. AwareXone sorts out which notice applies to each app, builds the takeover timeline, and prepares the reports you submit yourself through Meta's own tools. We never ask for your password or codes, and we cannot promise any outcome. Start with our [Facebook account recovery](https://www.awarexone.com/social-media-recovery/facebook-account-recovery) service, and read how we work on our [trust page](https://www.awarexone.com/trust). ## Frequently Asked Questions ### Why would Facebook think I am under 13 after a hack? Meta does not explain each decision. In one reported case, the owner says fake ID documents were uploaded by the intruder before the age classification. Your own security emails may show what changed. ### Can I request another review once the notice says I cannot? Meta's help page says a permanently disabled account cannot request another review. The hack report and some EU routes are separate. ### Does the Instagram age appeal help my Facebook account? Not on its own. It covers the Instagram decision. Use any age prompt each app still shows. ### Should I make a new Facebook account? No. Meta lists misrepresenting identity to avoid enforcement as a reason for disabling accounts, so a new profile can add problems. ### Who can use an EU dispute body? The European Commission page describes the route for users in the EU. Check each body's rules before applying. ## Official sources - [Official: Recover a hacked account, Facebook Help Centre (read 10 November 2026)](https://www.facebook.com/help/1216349518398524) - [Official: My personal Facebook account is suspended or disabled, Facebook Help Centre (read 10 November 2026)](https://www.facebook.com/help/103873106370583) - [Official: Why Instagram is asking for your date of birth, Instagram Help Centre (read 10 November 2026)](https://www.facebook.com/help/instagram/366075557613433) - [Official: Confirming your age on Instagram, Instagram Help Centre (read 10 November 2026)](https://help.instagram.com/966909308115586) - [Official: Out-of-court dispute settlement bodies under the Digital Services Act (DSA), European Commission (read 10 November 2026)](https://digital-strategy.ec.europa.eu/en/policies/dsa-out-court-dispute-settlement) --- AwareXone is an independent provider serving clients worldwide, not affiliated with any platform. The platform makes the final decision on every account. AwareXone never asks for passwords, OTP codes, backup codes or session cookies.