社交账号被盗怎么办？马来西亚找回指南
在马来西亚Instagram、Facebook、TikTok或WhatsApp账号被盗？官方找回步骤、报案渠道（NSRC 997）及如何识别找回骗局。 Official routes only. Platforms decide. No passwords or login codes.
Reviewed by Md Shariar Shanaz Shuvon, Founder & CEO of AwareXone.
If your social account was stolen in Malaysia, use the platform's official recovery flow on a clean device, then secure email and turn on authenticator two-factor authentication. Never share verification codes. Platforms decide the outcome. Report money loss to NSRC 997 and your bank while you recover access.
Summary- 账号被盗后第一步应该做什么？.
- 涉及金钱损失怎么办？.
- 如何识别"找回账号"骗局？.
- 账号被停用（不是被盗）怎么办？.
简短回答： 在马来西亚，如果您的社交账号被盗，请立即使用平台的官方找回渠道：Instagram 用 instagram.com/hacked，Facebook 用 facebook.com/hacked，WhatsApp 请重新用您的号码注册并开启两步验证。先保护好您的电子邮箱。如有金钱损失，请立即联系银行并拨打国家诈骗应对中心（NSRC）热线 997。切勿把密码或验证码（OTP）交给任何人。
#账号被盗后第一步应该做什么？
- 保护电子邮箱：修改邮箱密码，开启两步验证，检查转发规则。
- 使用官方找回页面：
- Instagram：instagram.com/hacked - Facebook：facebook.com/hacked - TikTok：在登录页使用"忘记密码"，或参考 TikTok 官方帮助 - WhatsApp：用您的手机号重新注册，并开启两步验证（WhatsApp 常见问题）
- 查找平台的真实邮件：Instagram 允许您在应用内查看近期官方邮件，以辨别钓鱼邮件（Instagram 帮助）。
- 通知亲友：提醒他们不要回应以您名义发出的借钱或投票请求。
#涉及金钱损失怎么办？
请立即联系您的银行，并拨打 NSRC 热线 997（MyGOV），同时到警局报案。在马来西亚，未经授权进入他人电脑系统属于《1997年电脑犯罪法令》下的罪行（AGC）。
"在我们处理过的 1,300+ 个案中，马来西亚华语客户最常见的入口仍是钓鱼链接、假冒客服，以及索取 WhatsApp 或 Instagram 验证码的熟人骗局。请先保护邮箱，再用平台官方找回流程；切勿向陌生人提供验证码。" - Md Shariar Shanaz Shuvon，AwareXone 创办人
#如何识别"找回账号"骗局？
- 主动私信、留言推荐"黑客"或"Meta内部人员"；
- 保证complete找回；
- 要求您提供密码、验证码或远程控制手机；
- 要求用加密货币、礼品卡或个人账户付款；
- 不断追加"手续费"。
#账号被停用（不是被盗）怎么办？
如果收到"账号已停用"的通知，请从通知页面提交复审申请。Meta 帮助中心说明，复审申请有时间限制（约180天，因地区而异）（Facebook 帮助）。TikTok 被封禁的用户仍可登录提出申诉并下载数据（TikTok 帮助）。
#什么时候可以考虑专业协助？
如果账号对您的生意很重要，或者情况复杂（例如商务管理平台、广告账户被盗），可以考虑寻求正规协助。SocialSafe by AwareXone 只通过平台官方渠道处理，不索取密码或验证码，不保证结果；我们在马来西亚时间上午9点至晚上11点期间，5小时内回复。马来西亚案件收费从 the quoted fee 起；马来西亚以外的客户以美元报价及收费，费用在审核案件后确认。我们提供中文、英文和马来文服务。了解个案评估流程：SocialSafe by AwareXone 账号恢复服务，以及收费。
#如何防止再次被盗？
- 为所有账号开启两步验证或通行密钥（passkey）；
- 绝不分享验证码；
- 定期检查已登录设备和 WhatsApp "已关联设备"；
- 为每个账号使用不同的强密码。
#各平台官方找回流程一览
| 平台 | 被盗 | 被停用／封禁 |
|---|---|---|
| instagram.com/hacked | 在停用通知页面申请复审 | |
| facebook.com/hacked | 在通知页面申请复审（Facebook 帮助） | |
| TikTok | 登录页"忘记密码"或应用内举报账号被盗 | 登录后申诉并下载数据 |
| 用短信验证码重新注册号码 | 在应用内申请复审 |
#需要保留哪些证据？
报警、联系银行或向平台申诉时，准备好以下资料会更顺利：
- 账号用户名，以及原本绑定的电子邮箱和手机号码；
- 平台发出的安全邮件或短信（例如"邮箱已更改"），包括日期和时间；
- 盗号者发布的帖子、发给亲友的信息截图；
- 银行转账或刷卡记录（如有金钱损失）；
- 收到诈骗信息的亲友名单。
请保留原始信息，不要删除聊天记录。
#WhatsApp 被盗：详细步骤
- 打开或重新安装 WhatsApp，用您的号码注册，输入6位短信验证码。重新验证会把其他设备登出（WhatsApp 帮助中心）。
- 如果系统要求输入您没设置过的两步验证 PIN，说明盗号者已设置，您需要等待几天才能重设访问（WhatsApp 帮助中心）。
- 到"设置 > 已关联设备"登出所有陌生设备。
- 开启您自己的两步验证，并添加您的电子邮箱。
- 通过电话或其他应用提醒亲友：不要转账，也不要转发任何验证码。
#商家账号被盗怎么办？
如果被盗的是 Facebook 专页、广告账户或 TikTok Shop：
- Facebook 商务资产：使用 Meta 商务帮助中心的商务资产组合找回流程（Meta Business Help）；
- 广告被盗刷：立即联系银行冻结银行卡并提出争议，同时拨打 NSRC 997；
- TikTok Shop：在卖家中心检查收款银行资料是否被更改；
- 恢复后，删除陌生管理员，并为每个管理员开启两步验证。
另请参阅我们的 Meta 广告账户被停用指南（英文）。
#被盗后如何加强账号安全？
- 每个账号使用不同的强密码，不要重复使用；
- 开启两步验证，优先使用身份验证器应用或通行密钥（passkey）；
- 删除陌生的已登录设备和第三方应用授权；
- 确认绑定的邮箱和手机号码都属于您；
- 定期下载账号资料备份；
- 商家账号至少设置两名可信管理员。
#被骗子要求付"赎金"怎么办？
如果盗号者要求您付钱才归还账号，请不要付款。付款后对方往往会继续勒索，账号也未必能拿回。请保留所有勒索信息作为证据，向警方报案；如已付款，立即联系银行并拨打 NSRC 997。
#如何分辨平台的真实通知？
- Instagram 允许您在应用内查看近期官方邮件，用来辨别钓鱼邮件（Instagram 帮助）；
- Facebook 的安全邮件通常来自 facebookmail.com；
- WhatsApp 的验证只会在应用内进行，不会要求您点击短信链接"验证"；
- 任何私信、电话自称"Meta 客服"或"TikTok 客服"并索取验证码的，几乎都是骗局。Meta 表示，自称 Meta 客服的电话号码可能是诈骗（Meta 帮助）。
Last checked: 14 October 2026. Platform policies change; always confirm steps on the provider's own help pages before you act.
SocialSafe by AwareXone works only through official platform channels, never asks for passwords or one-time codes, and states that platforms make the final decision. See the Trust Center and pricing for how a case review works.
This Chinese-language guide is for readers in Malaysia. The recovery steps match the official Instagram, Facebook, TikTok and WhatsApp help pages. Type those URLs yourself rather than trusting links in messages.
After you regain access, review login devices, recovery email, recovery phone and connected apps. Turn on an authenticator app. Warn friends on another channel if the attacker messaged them for money or codes.
AwareXone's SocialSafe service can review complex cases through official channels only. We never ask for passwords or one-time codes, and we do not promise that any platform will restore access.
If money moved, contact your bank quickly and consider NSRC 997 in Malaysia. Keep screenshots and security emails as evidence for both the bank and the platform appeal.
For business accounts, map every admin seat before you appeal. A disabled personal admin profile can freeze Pages and ad accounts linked to the same portfolio.
Ignore anyone who messages you first offering recovery for crypto or gift cards. That pattern is a known advance-fee scam described by the FTC.
When you compare providers, ask which official channel they will use, whether they ever need your codes, and what happens if the platform refuses. Get the scope in writing first.
Last checked: 14 October 2026. Policies change; confirm every step on the platform's own help centre before you submit an appeal or payment.
Keep recovery notes in Chinese if that helps your team, but submit platform forms in the language the form accepts and attach clear ID images.
Business owners should check Meta Business Suite or TikTok Business Centre for unknown admins after personal profile recovery.
If a fake recovery broker already has your codes, assume email and banking logins may be at risk and rotate those passwords on a clean device.
Save original security emails from Instagram, Facebook, TikTok or WhatsApp. Those timestamps help explain the takeover timeline.
Do not pay anyone who refuses to put scope and price in writing, or who will only accept crypto or gift cards.
AwareXone can review a case remotely. Fees for Malaysia are quoted in MYR after review; clients elsewhere are quoted in USD after review.
Nothing in this guide is legal advice. For criminal complaints, use NSRC, PDRM and your bank alongside the platform process.
After access returns, review devices, recovery contacts and connected apps, and warn friends on another channel if they were messaged for money.
Type official help URLs yourself. Do not trust recovery links that arrive by DM, SMS or email from strangers.
Last checked: 14 October 2026. Confirm every step on the platform help centre before you submit an appeal.
When you file with Cyber999, write facts in clear chronological order: when access was lost, which email still works, and which devices still show as logged in.
If your Meta ads or TikTok Shop stayed live after the hack, pause spend from any device you still control and tell your bank to watch for unusual card use.
Family members who share a phone should each keep their own recovery codes; a shared handset is how many Malaysia household takeovers start.
For WhatsApp Business, confirm the display name and catalog were not changed before you message customers again.
Screenshot the attacker profile URL and any ransom chat. Those files support both the platform appeal and a police report.
Use official App Store or Play Store apps only when you reinstall Instagram, Facebook, TikTok or WhatsApp after a compromise.
If the attacker changed the username, note the old and new handles in your appeal. Username history helps reviewers match ownership.
Public holidays and festival periods often bring more fake recovery ads. Slow down and verify any helper against a real company registration before you pay.
After recovery, turn on login alerts and remove unused linked apps from Instagram Settings and Meta Accounts Centre.
AwareXone publishes general education for Malaysia readers; case intake starts only after you choose to contact the team through the official site.
Keep receipts for any Meta Verified or similar subscription you used while locked out. They can show you still control billing.
If you run ads for clients, notify them on a channel outside the hacked account so they do not fund the attacker by mistake.
Chinese-language community groups are useful for moral support, but never paste full recovery codes or ID photos into a group chat.
When in doubt, stop and open the help centre URL from the platform app menu rather than from a search ad.
This guide is general information current as of mid-October 2026 and does not replace platform terms or legal counsel.
Start with the official help centre for Instagram, Facebook, TikTok or WhatsApp before you pay anyone. Write down the date you lost access, the email that still works, and every device that still shows as logged in.
Cyber999 and the National Scam Response Centre take reports that include clear timelines and screenshots. Those records also help if your bank needs to freeze a card used for ads after a takeover.
AwareXone has handled 1,300+ account recovery and removal cases with client names kept anonymous. That experience informs this guide, but every case still depends on platform review and the evidence you can show.
Malaysia fees are quoted in MYR after review. Clients outside Malaysia are quoted in USD after review. No honest helper can promise that Meta, TikTok or WhatsApp will approve every appeal.
If a stranger offers a same-day unlock for crypto only, treat that as a second scam. Real recovery work uses documented appeals, ownership proof and patience measured in days or weeks, not minutes.
社交账号被盗可以报警吗？
Instagram 有客服电话吗？
有人说可以付钱帮我找回账号，可信吗？
WhatsApp 被盗怎么办？
找回服务会保证成功吗？
账号被盗后多久能找回？
我的 Facebook 专页被盗了怎么办？
盗号者要我付钱才还账号，可以付吗？
Official sources
Need help with your account?
Tell us the platform and what you have already tried. We review the case first, work only through official platform processes, and never ask for your password, OTP or backup codes. The platform makes the final decision. Related service: Social media problem solutions.
