Facebook Page Hacked and Admin Removed: How to Recover

Your business Page is gone from your list of profiles, or you can no longer switch into it while strange posts go out under its name. Someone has removed you as admin of your own Page.

The short answer: secure your personal Facebook profile first, then submit Meta's hacked Page recovery form while logged in. Once back, check who holds full control and remove anyone who should not be there. In the wrong order, the attacker can simply remove you again.

This guide covers how takeovers happen, the recovery order, Page access levels, the narrow cases for a Page admin dispute, and the scams aimed at admins.

Last checked: 29 September 2026.

#What Should You Do If Someone Removed You From Your Facebook Page?

Treat it as a hacked account problem. First make sure your own profile is safe: if you cannot log in, go to facebook.com/hacked on a device you have used with Facebook before. Then, logged in, submit Meta's form to recover a hacked Facebook Page you manage. Meta says it aims to reply by email within a day, though some reviews take longer, and that it can only act if it can confirm the Page was compromised. In Malaysia, if money was taken or you typed a code into a fake page, call your bank or the NSRC on 997 and make a police report as well. Nobody outside Meta, including AwareXone, can put you back on the Page.

#How Do Page Takeovers Usually Happen?

A Page has no password of its own. People manage it through their personal profiles, so whoever controls an admin's profile can control the Page. Meta's own Page recovery article gives two typical routes:

• A hacker steals an admin's password, logs in to that personal account, adds themselves to the Page and then removes the real admin.
• A scammer tricks an admin into handing over control of the Page and removing their own access, often inside Business Manager or Meta Business Suite.

It does not have to be your profile. If a staff member, agency or freelancer had full control and their profile was taken, the attacker inherits their power over your Page. Meta's page on requesting Page access suggests asking current and former employees and contractors to check their own access.

#What You See, What It Means and What to Do

Match what you see before you act. Labels vary by app version, language and region, and between Pages inside and outside a business portfolio.

If the last row matches, your Page was restricted rather than stolen, and our guide to an unpublished Facebook Page is the better starting point.

#Step One: Secure Your Personal Profile Before the Page

Recovering the Page while your profile is still compromised is wasted effort. Meta's hacked account hub sends everyone to facebook.com/hacked on a device they have used before, and its Account Recovery page offers "I was hacked" and "I can't access the email or mobile number on my account" as starting points.

1. Secure the email linked to Facebook: new password, and delete forwarding rules you did not set.
2. If your phone suddenly shows no service while codes stop arriving, call your carrier from another phone and ask whether your SIM was replaced.
3. Go through facebook.com/hacked, change your password, and log out of sessions you do not recognise.
4. Turn on two-factor authentication and store the backup codes offline.
5. Ask every other person with full control to check their own profiles too.

If the attacker also changed the email and phone on your profile, see our guide to a Facebook account hacked with the email and phone changed before you return to the Page.

#Step Two: Submit Meta's Hacked Page Recovery Form

Meta calls its hacked Page form "the best thing to do" and says that even people with Meta Verified or other support should use it, because it is the fastest way to recover a Page. Meta reviews the report and replies by email.

The form has conditions. Meta says you can only submit it if you are logged in and have recently lost access to a Page. Its help page lists what to try when the form does not work:

• You cannot see the form: log in to Facebook first, then open the page again.
• You cannot log in: use facebook.com/hacked on a device you have used before.
• The form will not let you pick your Page: Meta says it does not see that you recently lost access, so try opening the Page again.
• You are helping someone else: they must log in and submit the form themselves. Do not ask for their password.

#Full Control, Partial Access and Task Access Explained

Access levels tell you who can lock you out, and who can let you back in. Meta's page about Facebook Page access describes them for Pages outside a business portfolio:

• Facebook access with full control: can switch into the Page, manage every setting and give or remove anyone's access. Meta says this includes removing you and deleting the Page.
• Facebook access with partial control: can switch in and handle content, messages, ads and insights, but not settings or access.
• Task access: works only through tools such as Meta Business Suite or Ads Manager, and cannot switch into the Page.

Pages inside a business portfolio use different labels. Meta's Page access article for business portfolios names partial access (business tools only), partial access (business tools and Facebook) and full control. If the whole portfolio was taken, with ad accounts and payment methods, our guide to a hacked Facebook Business Manager covers the wider clean-up.

#Step Three: After You Get Back In

Recovery is not finished when the Page reappears. Meta asks you to unlock your account if it was locked, undo changes you do not recognise in the Page and business portfolio, and turn on Advanced Protection.

1. Open Page access (switch into the Page, then "Settings and privacy", "Settings", "Page setup", "Page access"). Meta's page on giving and removing Page access says you need full control to remove people.
2. Remove anyone you do not know, and downgrade people who do not need full control.
3. Open "Page management history" under "Page setup". Meta's help page on it says it does not show actions by system users.
4. Check the Page name, contact details, linked Instagram account, ads and payment methods, and reverse the attacker's changes.
5. Delete what the attacker posted, and tell followers briefly what happened.
6. Turn on Advanced Protection. Meta lists Page admin accounts among those at higher risk of phishing.

#When a Page Admin Dispute Is the Right Route

A Page admin dispute is not for hacks. It is Meta's route for someone who owns a Page but cannot get full control from the person who holds it. Meta's Page admin dispute article says to first ask that person to give you full control, and lists the situations where you may be eligible:

• The person with access was a former employee or contractor.
• The person with access has died, and you can provide a death certificate.
• The only person with access accidentally removed themselves from the Page.
• The Page is a Location Page with a parent Page as the admin.
• There is a third-party dispute over business ownership, with a court order.

You need three documents ready: identification, a signed attestation letter on letterhead, and an official ownership document, such as a certificate of incorporation or a business licence. Meta says they must be unaltered PDF, JPEG or PNG files. You submit through Meta Business Support Home by starting a chat and choosing "Page Admin Dispute".

If your Page was hacked, use the hacked Page form instead. Never claim a dispute you do not qualify for or send documents that are not genuine.

#Evidence Checklist Before You Contact Meta

• The Page name, its URL and, if you have it, the Page ID.
• The date and approximate time you last had access, and when you noticed the change.
• Screenshots of login alerts, security emails from Facebook, and posts or ads you did not create.
• The names of everyone who had full control before the takeover.
• Any suspicious message you clicked, with the sender address and the link, captured as a screenshot.
• For a dispute only: your ID, the signed attestation letter and one ownership document, saved as PDF, JPEG or PNG.

#Fake Copyright and Page Violation Notices

A common opening is a message that looks official, claiming your Page broke copyright rules and will be removed unless you "verify" through a link. The link opens a lookalike login page that collects your password and then your two-factor code. Our guide to fake copyright violation messages shows how these lures are built.

Meta's page on phishing says its representatives never request money, passwords or payment details over chat or email. It lists the only domains Meta emails from, including facebook.com, facebookmail.com, fb.com and meta.com, but also warns of phishing links inside Business Manager partner requests that do arrive from facebookmail.com. Report suspicious messages to [email protected].

• Threats with a short deadline, such as a Page being deleted within hours.
• A link to "appeal" outside facebook.com, or a form asking for your password and code.
• A partner or access request from a business you do not know.
• Messages in English, Bahasa Malaysia or Chinese from a profile or Page calling itself Meta support.

#If You Paid Someone or Shared a Code in Malaysia

Deal with the money first. The NSRC's FAQ on the NFCC website says to contact your bank's 24-hour hotline or the NSRC on 997 as soon as you discover a fraudulent transaction, and to make a police report at the nearest station within 24 hours. The NSRC adds that it, PDRM, MCMC, BNM and banks will never ask for your password, PIN, TAC or OTP.

If the takeover came from a phishing page, you can also report it to CyberSecurity Malaysia's Cyber999 incident response centre by online form, email, phone or its app, with the link and the time you received it.

#When a Case Review Makes Sense

Only Meta can return a Page, and many admins manage it alone with the steps above. Outside help is worth considering when the Page carries your livelihood, several admins are compromised at once, or the form will not let you select the Page. SocialSafe by AwareXone, AwareXone's recovery service, looks at the case before anything is agreed and tells you plainly whether an official route is still open. You can read how we handle Facebook Page recovery, and our Trust Center explains what we will never ask for, starting with your password and login codes.

#Frequently Asked Questions