TikTok Business Account Hacked? Recover Ads and Access

Your card statement shows TikTok ad charges nobody on your team approved. Or you open TikTok Business Center and your login fails, a stranger is listed as an admin, or your shop's TikTok profile is posting things you never wrote.

Move fast on two fronts: stop the money and tell TikTok. Call your card issuer about the charges, then contact TikTok for Business support (or your account manager) and say the account is compromised. Then work out which part of your TikTok setup was taken, because each part has its own way back.

This guide is for businesses, agencies and sellers. If only a personal TikTok login was taken, our guide to a TikTok hack where the email was changed fits better.

Last checked: 5 October 2026.

#What Should You Do If Your TikTok Business Account Is Hacked?

Contact your bank or card issuer about any ad charges you did not authorise, then report the compromise to TikTok. TikTok's Business Center security page says managed clients should contact their account manager immediately and everyone else should contact customer support immediately. If you can still log in, use the Ad Assistant in Ads Manager or Business Center; if you cannot, use the Feedback and Help form. TikTok says it will suspend a compromised account to secure it, investigate, tell you how to regain control and process reimbursements for unauthorised charges. Recover the TikTok app account separately through the app. In Malaysia, call 997 if money was lost to a scam or a code was shared.

#The Three Layers a TikTok Business Can Lose

Most small businesses think of "the TikTok account" as one thing. In practice there are three, and an attacker can hold one while you still hold the others.

TikTok describes Business Center as granting full control over your business on TikTok, including modifying or deleting the business and adding or removing people from the member list. Its roles and permissions page says Admins have full access to all system functions, while Standard members work only on the accounts and assets they are given. TikTok's 2-step verification page adds that only Admins can turn that protection on. An attacker with an Admin seat can lock out everyone else, which is why a rogue admin is the most urgent sign.

#Which Situation Are You In?

#First Hour Runbook

1. Phone your card issuer or bank. Tell them about the TikTok ad charges you did not authorise and ask about blocking the card linked to the ad account.
2. Check your own email inbox and phone line. Whoever controls the inbox tied to Business Center can reset it again. Change that email password and sign out other sessions.
3. If you can still log in to Business Center as an Admin, remove members, partners and pending invitations you do not recognise, and pause campaigns you did not create.
4. Contact TikTok for Business support (or your account manager) and say the account is compromised. Keep the ticket reference.
5. Separately, secure or recover the TikTok app account using the steps below.
6. Write down a timeline: when you last had normal access, what changed and when the first unknown charge appeared.

#Getting Back Into the TikTok App Account

The app account follows TikTok's consumer recovery steps, not the Business Help Center. TikTok's hacked account page lists the signs: a changed password or phone number, a changed username or nickname, videos deleted or posted without your permission, and messages you did not write. If you are still logged in, it advises three steps under Profile, the Menu button, then Settings and privacy:

1. Account, then Password: change the password.
2. Account, then Account Information, then Phone number: link your own phone number.
3. Security & permissions, then Manage devices: remove unwanted or suspicious devices.

If you are logged out and the attacker changed the email or phone, work through the login screen's "Forgot password?" option and TikTok's Report a problem form under "Account access / security". Our TikTok email changed guide walks through friend verification and the identity form in order.

#Getting Back Into TikTok Business Center

TikTok's Business Center password reset page sets out the steps: go to Business Center, click Log in, then Forgot password, enter the email or phone number you used to set it up, and enter the verification code it sends. A 2-step verification prompt then appears.

If another Admin on your team still has access, they can act straight away: remove the rogue member, check partners, and review which ad accounts and TikTok accounts are assigned to whom. This is the main reason TikTok recommends at least two Business Center Admins.

#Ads Manager: Stopping the Spend and Reporting the Charges

TikTok's guidance on securing a TikTok for Business account repeats the same promise as the Business Center page: TikTok will suspend a compromised account, notify you after its investigation about how to regain control, and process reimbursements for charges that resulted from unauthorised activity. TikTok decides what counts as unauthorised, so report it early and keep your evidence.

If the ad account shows a suspension, TikTok's page on suspended ad accounts says all ads under it are stopped and most settings are locked, and that a temporary suspension can become permanent if the issues remain or the appeal is rejected, so do not wait. Its troubleshooting page says appeals go through Ad Assistant, under Account/Ad Review, then Account Review, then Account Suspension Appeal, that you should file one appeal per incident and that you should avoid creating new ad accounts while the appeal is reviewed. Say clearly that the account was compromised and the ads were not yours.

#How to Contact TikTok for Business Support

TikTok's contact page gives two routes, depending on whether you can log in:

• Logged in: open TikTok Ads Manager, Business Center or the Business Help Center, click the blue circular Ad Assistant icon at the lower right, then Get support. Pick a topic, describe the issue and submit. Manage Tickets shows the status of existing requests.
• Locked out: TikTok says you must be logged in to reach Ad Assistant, so it points people with a login issue to the Feedback and Help contact form.
• Managed clients: contact your TikTok account manager as well.
• App account problems: TikTok's contact page sends user login and app issues to TikTok user support rather than Business support.

The same page says that in certain cases you may receive support and onboarding messages from TikTok representatives and partners under these domains: @bytedance.com, @advertiser.tiktok.com, [email protected] and @c.tiktok.com. A message from a lookalike domain, a Gmail address or a social media DM is a red flag. Even a real-looking sender is no reason to hand over a code. For a wider look at real contact routes, see our guide to how to reach TikTok support from Malaysia.

#Fake "TikTok Business Support" Messages and Recovery Scams

Many business takeovers start with a message dressed up as TikTok: an urgent "ad account suspended" warning, a fake policy violation, or a partnership offer with a login link. After a hack, a second wave arrives: comments and DMs from "recovery agents" who say they can get the Business Center back. Watch for these signs:

• They ask for your password, a login or verification code, or backup codes.
• They want you to log in through a link they send rather than going to ads.tiktok.com yourself.
• They ask to be added as a Business Center member or partner "to fix it".
• They promise a result, a deadline, or "inside contacts" at TikTok.
• They want payment by crypto, gift card or transfer to a personal account.

#If Money Was Lost in Malaysia

Unknown ad charges are first a matter for your bank and TikTok. If money was also lost to a scam (for example, you paid a fake support agent or a code was shared and funds moved), the government's NSRC 997 hotline page says to call 997 within 24 hours of discovering the scam so authorities can try to block the money, contact the relevant bank and lodge a police report at the nearest police station.

To report the intrusion as a computer security incident, CyberSecurity Malaysia's Cyber999 centre acts as the national point of contact for reporting such incidents. A police report also helps if your bank or insurer asks for one.

#Evidence to Collect for TikTok Support

A clear, consistent report is easier for TikTok to check. Gather these before you write:

• Your Business Center ID, ad account IDs and TikTok username.
• The email and phone number originally used to set up Business Center.
• Screenshots of the member list, partners and invitations, showing any unknown entries.
• Screenshots of campaigns, ads and charges you did not create, with dates and amounts visible.
• Bank or card statements showing the unauthorised charges, and your bank's case reference.
• Security emails you received (password changed, new member added), with dates and times.
• Your timeline, the support ticket references and any police or Cyber999 report numbers.

#Lock Down Business Center Once You Are Back

TikTok's Business Center security page lists the controls that would have made the takeover harder. Set them up the same day:

• Keep at least two Business Center Admins, both people inside your company, so one lost login does not lock out the business.
• Turn on 2-step verification for all members, not only admins. TikTok's 2-step verification page puts it under Business Settings, then Settings, then the Security section.
• Add an email domain allowlist so only addresses on your company domain can be added. TikTok's allowlist guide uses the same Security section.
• Give each person the minimum role they need, and remove inactive users.
• Review members, partners and invitations regularly, and remove anything you cannot account for.
• Use a unique password for every admin, never shared between coworkers.

For a routine that covers TikTok alongside Meta and other platforms, use our business social account protection checklist.

#When a Case Review Makes Sense

The steps above are often enough to act alone. A second look helps when the attacker holds the original email or phone, when the app account and Business Center were both taken, when an ad account suspension followed the hack, or when tickets have gone round in circles. SocialSafe by AwareXone, our recovery service, reviews the case first and tells you honestly which official route is still open, if any. We work only through TikTok's own forms and support, and we never ask for passwords, login codes or backup codes. See how business and creator recovery works, and read our Trust Center for what we will not do.

#Frequently Asked Questions