“Select ‘my account was hacked’ … put in your username / email / phone number. Also do anything else they request like a ‘selfie’ or photo of you with ID.”
“My Instagram account was hacked and I can no longer log in. What are the most effective steps to recover my account if the hacker changed my email and phone number?” — a real user question from Quora.
These are real concerns people search for, and I’ve personally recovered my own account after a takeover in 2025. The panic is real — but the recovery is possible. That’s why I wrote this guide.
This article is your full guide, written simply and clearly, showing you the few steps that actually work, even when you feel like all hope is gone.
Quick Self-Check Table: Was Your Instagram Account Hacked?
Situation | Likely Cause | Recommended Fix |
Suddenly logged out | Password reset by attacker | Request Login Link + Reset Password |
Email or phone changed | Account takeover in progress | Use “My account was hacked” form |
Unknown posts/messages sent | Unauthorized access | Revoke devices + force logout |
Two-factor disabled without you | High-risk attack | Restore via Identity Verification |
Ads running without permission | Business account compromised | Secure billing + regain access |
Why Instagram Accounts Get Hacked
Understanding how your account was compromised helps Instagram verify your identity faster — and prevents future attacks.
Common hacking scenarios:
Phishing login pages (“Your account will be deleted, log in here…”)
Fake verification emails claiming you earned the blue check
Password reuse across Instagram, Facebook, PayPal, etc.
Insecure Wi-Fi networks capturing login sessions
Unauthorized third-party apps that bypass Instagram security
How to Recover a Hacked Instagram Account (All Working Methods)
Below is the exact recovery flow Instagram recommends — combined with real user-tested methods from Reddit, Quora, and Meta’s official guides. I’ve personally helped multiple clients recover hacked accounts, and this is the version that consistently works.
Method 1 — Use Instagram’s Login Link (Fastest Fix)
In most hacks, attackers change your password first but forget to remove your email or phone number immediately. This method uses the remaining contact information to get ahead of them and regain access before they fully lock you out.
Steps:
Step 1: Open Instagram and tap “Forgot password?”
This brings you to Instagram’s official recovery flow.
Step 2: Enter your email, username, or phone number
Use any contact info that was linked before the hack.
Step 3: Tap “Send login link”
Instagram will send a secure login link to whatever contact method is still available.
Step 4: Open your inbox or SMS and tap “Login”
This bypasses the hacker’s password and gives you temporary access to your account.
Step 5: Immediately create a new password
Once inside, go straight to Settings → Security → Password and set a new, strong password.
Best for: You can’t sign in, but your email or phone number is still on the account.
Method 2 — Recover Using “My Account Was Hacked” (Most Reliable)
This is Instagram’s official hacked-account pathway. If the attacker swapped your email/phone, this method bypasses the stolen details and sends recovery instructions to a secure contact address you control.
Steps:
Step 1: Go to the Instagram login screen and tap “Forgot password?”
This opens the deeper recovery options.
Step 2: Tap “Need more help?”
You’ll be redirected to Instagram’s official support flow.
Step 3: Select “My account was hacked”
This tells Instagram you no longer control your contact information.
Step 4: Follow the on-screen security prompts
Instagram will guide you through recovery questions and ownership checks.
Step 5: Complete the video selfie verification if requested
Record your face as instructed so Instagram can verify you against your account’s photos.
Best for: The hacker changed your email or phone number, and login links no longer reach you.
Method 3 — Use the Instagram Account Recovery Form (Deep Recovery)
This form triggers a manual account review, allowing Instagram to track ownership using historical login data—even if the hacker changed everything.
Steps:
Step 1: Open Settings and privacy → Help → “My account has been hacked”
This leads you to the advanced recovery form.
Step 2: Enter your previous username and any email you’ve used before
Instagram uses older account data to locate your profile.
Step 3: Describe what changed
Write details like “email replaced,” “phone number removed,” or “username changed.”
Step 4: Submit the form and check your inbox
Instagram will send a verification email to a secure contact address.
Step 5: Complete identity verification
This may include a video selfie or confirmation code sent to an old email.
Best for:
Your username was changed
You lost access to your email and phone
Instagram isn’t sending codes
You’re completely locked out
Method 4 — Remove Hacker Devices from Meta Accounts Center
Even after password resets, hackers can stay logged in. Removing devices manually ensures you’re the only person who retains access.
Steps:
Step 1: Go to Settings → Accounts Center → Password & security
This shows all devices connected to your Instagram.
Step 2: Open “Where you’re logged in”
Review every device on your account.
Step 3: Remove any unknown or suspicious devices
Pay attention to unfamiliar locations or browsers.
Step 4: Turn on Two-Factor Authentication (2FA)
Enable it inside Security → Two-Factor Authentication for extra protection.
Step 5: Reset your password one more time
This ensures all old sessions, including the attacker’s, are fully invalidated.
Best for: You recovered login access, but the hacker may still be logged in on another device.
Method 5 — Recover Business or Creator Accounts (Billing/Ads Hacks)
Business accounts follow Meta rules—not just Instagram’s. Once you report billing fraud, the system escalates your case and restores access quickly.
Steps:
Step 1: Log into Meta Business Suite
This is where most business-related compromises occur.
Step 2: Remove any suspicious admins
Go to Business Settings → People and revoke access from unknown users.
Step 3: Check Ads Manager for unauthorized campaigns
Pause or disable anything you didn’t create.
Step 4: Open Support Inbox → request a “Security Review”
Meta prioritizes cases involving unauthorized spending.
Best for: The hacker ran ads, changed Page Roles, or hijacked your Business Manager.
Method 6 — Recover Deleted Photos, Videos, or Messages After a Hack
Hackers often wipe DMs or delete media before you regain access. Instagram deletes cannot be reversed in-app—but your iPhone often keeps hidden fragments. Instagram’s official “Data Download” can take days—and sometimes returns zero messages because they weren’t synced to Meta servers.
The good news: the deleted data often still exists on your iPhone.
This is where Gbyte Recovery becomes extremely effective. Gbyte Recovery pulls these files back even after attackers remove them.
Why experts recommend Gbyte Recovery:
Free scan & preview — see what can be recovered first
No data overwrite — your current Instagram stays safe
Selective export — recover only the messages you want
High recovery accuracy with advanced algorithms
No cable required — works via secure Apple ID login
Supports more than Instagram — also recovers WhatsApp, LINE, Messenger, Snapchat, photos, videos, and more
Steps:
Step 1: Download and open Gbyte Recovery (Free Scan available)
Install the tool on your PC or access web version on your mobile device.
Step 2: Select Instagram → click “Scan” for free
Gbyte creates a safe snapshot of your device’s storage. This allows the tool to find deleted messages without overwriting your existing chats.
Step 3: Let the scan complete
Gbyte checks app fragments, encrypted caches, thumbnails, and hidden storage areas that Instagram itself can’t access.
If your account has a lot of media, the scan may take a few minutes.
Step 4: Preview your deleted messages and media
You’ll see all recoverable Instagram DMs, photos, and videos—organized by chat or timeline. The free scan lets you preview all recoverable Instagram messages and media before paying.
Step 5: Select what you want to restore
Export only the conversations or files you need. Gbyte keeps your current Instagram data completely untouched.
Why this works:
Deleting an Instagram DM doesn’t erase it instantly. Your device simply marks the space as “available,” while the original message still exists until overwritten.
Gbyte Recovery uses a non-invasive snapshot technology that:
Identifies deleted message fragments
Reads data safely without writing anything
Prevents overwriting of active Instagram chats
Recovers messages even when server-based recovery tools show nothing
This makes it one of the few ways to bring back hacked-and-deleted Instagram data.
FAQs
Why can’t I recover my hacked Instagram account even after submitting the form?
Most failed recoveries happen when Instagram cannot confirm your identity. Try resubmitting the video selfie in better lighting or from different angles.
How long does Instagram take to respond to hacked account requests?
Typically 5–24 hours. Severe cases or suspicious verification may take 2–3 days.
Can I recover Instagram without email or phone?
Yes — use the “My account was hacked” option and complete the video selfie verification. It’s the default method when no contact info works.
The hacker changed my username. Can I still recover the account?
Yes. Enter your original username or any email/phone ever linked to the account.
Why am I not receiving the Instagram login code?
Possible reasons:
Email filters (check spam)
Phone number changed by hacker
Carrier delays
Instagram rate-limited your requests
Can Instagram recover deleted posts after a hack?
Instagram stores deleted posts in the Recently Deleted folder for 30 days. For device-level media, you can use tools like Gbyte Recovery to scan and restore locally saved photos that were removed.
Final Thoughts
Recovering a hacked Instagram account can feel overwhelming, especially when your identity, business, or memories are on the line. But with the right steps — login link, hacked account form, identity verification, and smart post-recovery security — most accounts can be restored.
