Instagram Account Hacked and Deleted? Act Before It Is Gone

Your password no longer works, friends tell you your profile has disappeared, and when you search for your own username Instagram shows nothing. Somebody got into your account, and it looks as though they deleted it.

The short answer: a deletion on Instagram is normally a request with a waiting period, not an instant wipe. If you get back into the account before that period ends, the request is cancelled. So this is a race, and every step below is about winning it.

This guide covers how to confirm what happened, the order to try Instagram's recovery routes, how to stop a repeat deletion, what is lost if the clock runs out, and the scams aimed at people in this spot.

Last checked: 5 October 2026.

#Can You Stop a Deletion a Hacker Requested on Instagram?

Usually yes, if you act inside the window. Instagram's help page on deleting Edits, which is part of Instagram, says you can cancel an Instagram account deletion request before the 30-day deadline by logging back into the account. Instagram's page on permanently deleting a profile adds that the number of days you can cancel varies by region, and that once the period ends the profile and its information are permanently deleted and cannot be retrieved. The same page says Instagram cannot delete a profile for anyone. That leaves one job: regain login access today through the security email, the login link or instagram.com/hacked. Nobody outside Instagram, including AwareXone, can cancel a deletion for you or reverse one that has completed.

#First, Confirm the Account Is Really Being Deleted

At the time of writing, Instagram shows a generic notice, usually "Sorry, this page isn't available.", for any profile it cannot display, and the wording can vary by app version and region. That notice alone does not prove deletion. Other states look identical, and two need a different response.

Instagram's page on disabled accounts gives the quickest test: a disabled account shows a message when you try to log in. If you see it, our guide to appealing a disabled Instagram account is the one to follow. For deactivated and deleted accounts in general, see our guide to restoring a deleted or deactivated Instagram account.

#Why Hackers Delete Accounts, and Why It Gives You Time

Attackers delete accounts to hide scam messages sent from them, out of spite after a failed ransom demand, or to free up a username. They could only do it because they were logged in: Instagram's deletion page says you must be able to log into a profile to request deletion.

• The clock starts on the day the hacker submitted the request, not the day you noticed.
• During the waiting period Instagram says the content is not accessible to other people, which is why your profile looks gone even though it still exists.
• Instagram says the full deletion process can take up to 90 days. That is background cleanup, not extra time to cancel.
• If the hacker only deactivated the account, Instagram's deactivation page says your content stays hidden until you reactivate it by logging back in. The hacker can still turn that into a deletion while they hold the login.

#Regain Access in This Order

Instagram's page for a hacked profile lists several recovery steps and recommends trying all of them, because some may not be available for your type of account. Work through them in this order and move on the moment one fails. Type every address yourself rather than tapping links in messages.

1. Search every inbox you have ever used for Instagram, including spam, for an email from [email protected] about a changed email address. Instagram's page on a changed account email says this message goes to the original address with a special link that reverses the change. Select "secure my account" and follow the prompts.
2. If the hacker also changed your password, request a login link. On the login screen tap "Forgot password?", enter your username, email or phone number, tap "Send login link", complete the captcha and open the link from your email or SMS.
3. If the link goes to an address or number the hacker now controls, open a browser and go to instagram.com/hacked. Instagram's hacked account hub sends everyone who has lost access there. Choose the option that matches what happened.
4. If Instagram offers support, enter a secure email address that only you can open. Instagram says you should then receive an email with next steps.
5. Complete the identity check. For an account without photos of you, Instagram says it asks for the email or phone you signed up with and the type of device you used at sign-up. For an account with photos of you, it asks for a video selfie turning your head in different directions.
6. The moment you are back in, look for any notice about the pending deletion and choose to keep the account. Instagram's help pages do not quote the button label, so read the screen carefully.

If the hacker swapped both your email and phone number, our guide to an Instagram account hacked with the email and phone changed goes through that case step by step. Instagram's page on lost email or phone access names one dead end: if you cannot get into the email you registered with and your Instagram was not linked to Facebook, it says it is unable to give you access. So recover the email account with your provider in parallel.

#Decision Tree: What You Still Have Decides Your Route

• Password still works: log in now, then lock the hacker out.
• Password changed, email still yours: request a login link to that email.
• Email changed, reversal email found: use its secure my account link first.
• Email and phone both changed: go to instagram.com/hacked, give a secure email and complete the identity check.
• Instagram linked to your Facebook in Accounts Center: try logging in with Facebook, and secure that account too.
• Disabled notice on screen: follow the review option. This is an appeal, not a deletion.
• Well past the deletion period and every route fails: move to the section on what is lost.

#Lock the Hacker Out So They Cannot Delete It Again

If the attacker still has a session open or controls your email, they can request deletion again tonight. Do all of this in one sitting, in this order.

1. Secure the email account first: new password, remove forwarding rules and recovery addresses you did not add, and sign out of other sessions. Whoever holds that inbox can reset Instagram.
2. Change your Instagram password to one you have never used anywhere else.
3. Check that the email address and phone number on the account are yours, and remove any that are not.
4. Open "Where you're logged in" under Password and security. Instagram's login activity page shows how to select devices and log them out.
5. Turn on two-factor authentication. Instagram recommends an authentication app, and says backup codes let you log in if you lose your phone. Save them somewhere offline. If you later lose that phone or the codes themselves, see our guide to lost Instagram backup codes and your 2FA phone.
6. In Accounts Center, remove linked accounts you do not recognise, and revoke any third-party apps that look suspicious.

If the hacker changed your username before requesting deletion, change it back once you are in, if it is still free. Our guide to an Instagram username stolen after a hack covers what to do if someone else has already taken it.

#What Is Lost If the Deletion Completes

According to Instagram's deletion page:

• Your profile, photos, videos, comments, likes and followers are permanently removed.
• You lose access to Instagram's "Export your information" tool, so you cannot download a copy afterwards.
• Copies may stay in backup storage or be kept for legal reasons, but those are not a route back to the account.
• You can sign up again with the same username, or add it to another profile, only if nobody new has taken it. Instagram's disabled accounts page says you can reuse the same email address for a new account.

A new account is a fresh start, not a recovery: it does not stop a pending deletion or bring back followers, so keep working on the original until the window has clearly passed. Ask friends and family whether they kept copies of photos you shared with them.

#How to Spot a Recovery Scammer

Post "akaun Instagram kena hack dan dipadam" or "IG被盗后被删除" in a public group and replies can arrive quickly, often from profiles calling themselves recovery experts or ethical hackers. Run any offer through this checklist:

• They ask for your password, a login code, a backup code or a code sent to your phone. Stop there.
• They claim they can bring back a completed deletion, or promise a result before looking at anything.
• They claim a contact inside Meta or a tool that skips Instagram's checks.
• They want money first, often with a countdown to make you rush.
• They send a link to "verify" your account. Instagram's recent emails page lists the only domains its security emails come from, including @mail.instagram.com, and says Instagram never contacts you about account security by direct message.

Legitimate help works the other way round: a review of your case first, an honest answer on whether an official route is still open, only Instagram's own recovery flows, and never a request for your codes. It also says up front that the work is best effort, Instagram decides, and some accounts do not come back. Our article on fake Meta support accounts shows how these scams usually open.

#Mistakes That Burn the Deletion Window

• Waiting for Instagram to notice. A pending deletion stops when someone logs in, not on its own.
• Assuming you have the full 30 days. Instagram says the cancellation period varies by region.
• Opening a replacement account first and forgetting that the original may still be saveable.
• Getting back in but leaving the hacker's email on the account, so they can delete it again.

#If Money Was Lost or a Code Was Shared in Malaysia

If you paid a fake recovery service, or the hacker used your account to collect money from followers before deleting it, deal with the money first. The government's NSRC 997 page says to call 997 within 24 hours of discovering the scam so the authorities can try to block the bank accounts and transactions involved, then contact your bank and lodge a police report at the nearest station.

If you typed your password into a fake Instagram login page, change it and report the page to CyberSecurity Malaysia's Cyber999 centre, which takes incident reports by online form, email, phone and its mobile app. If your phone suddenly shows no service while Instagram codes stop arriving, call your carrier from another phone and ask whether your SIM was replaced.

#When a Case Review Makes Sense

You can do everything above yourself, and should start now. A second opinion helps in a narrow set of cases: the email and phone are changed, the identity check keeps failing, the account carries a business you cannot easily rebuild, and the window is shrinking. SocialSafe by AwareXone, our recovery service, reviews the case before anything is agreed, works only through Instagram's own recovery routes, and tells you plainly if the deletion has already completed or no route is left. You can read how we approach Instagram account recovery, and our Trust Center sets out what we never ask for, starting with your password and codes.

#Frequently Asked Questions