What to Do If Your Social Media Account Is Hacked

This guide outlines immediate triage steps, platform-specific recovery portals for Meta and TikTok, and key security practices to protect your brand during an incident.

Telltale Signs Your Account Has Been Compromised

You should start account recovery immediately if you notice any of these red flags:

Unauthorized Credential Changes: You receive emails or SMS alerts notifying you that your password, linked email address, or phone number was updated without your knowledge.
Unrecognized Activity: Unapproved posts, Reels, stories, or ad campaigns are running from your account or Meta Ad Manager.
Suspicious Messages: Messages or direct links are being sent to your followers or friends from your inbox that you didn't write.
Forced Logout Across Devices: You're suddenly logged out and your usual credentials no longer work.

Immediate Action Plan (First 15 Minutes)

Check Your Linked Email for "Security Alerts"

When a hacker changes the email address on your Meta or TikTok account, the platform automatically sends an alert to your original email address.

Look for an email titled "Was this you?" or "Email address changed."
These emails contain a special link allowing you to reverse the email change immediately and re-secure your login.

Change Passwords on Your Email and Connected Accounts

Hackers frequently gain access to social accounts through compromised email inboxes. Immediately change the password on your primary email account and enable Two-Factor Authentication (2FA) there first.

Official Platform Recovery Guides

If you've been completely locked out and can't log in, use the official recovery pathways built by Meta and TikTok.

Meta Accounts (Facebook, Instagram & Threads)

Situation	Action / Official Tool
Facebook account hacked (still have email/phone access)	Visit facebook.com/hacked on a browser device you've previously used to log in. Follow the automated wizard to reset credentials and kick out active sessions.
Facebook account hacked (email or password changed)	Go to facebook.com/login/identify. Search using your former email or phone number. If prompted, follow the secure photo ID verification workflow to confirm your identity.
Instagram / Threads hacked	Visit instagram.com/hacked on your mobile browser or app. Select "My account was hacked" and follow the prompts. Instagram may ask you to record a video selfie to verify your identity against your profile photos.

TikTok Accounts

Situation	Action / Official Tool
Still have access to linked phone/email	Tap Profile > Menu > Settings and privacy > Account > Password. Reset the password immediately and check Manage Devices to remove unknown active sessions.
Password and email were changed by hacker	Go to the TikTok login screen, select Forgot Password?, and attempt recovery via your linked phone number. If that's unavailable, submit an official ticket through the TikTok Share Your Feedback / Report a Problem web form. Include your username, date of compromise, and proof of account ownership (for example, transaction receipts or linked email history).

Beware of Account Recovery Scams

When businesses post publicly about losing an account, automated bots and cybercriminals often target them in comment sections or direct messages.

Heads up: Never pay third-party "hackers" or services claiming they can recover your account. No third-party service, Instagram "recovery expert," or Telegram bot has access to internal Meta or TikTok servers. Requests for payment or passwords from outside services are almost always scams designed to steal more money or credentials.

Official recovery is handled exclusively through automated platform flows (facebook.com/hacked and instagram.com/hacked), or official in-app support.

What to Do Once You Regain Control

Once you regain access to your account, take these steps to prevent a re-compromise:

Log out all other devices: In your account settings, go to active sessions and select "Log out of all other devices."
Turn on authenticator app 2FA: Set up Two-Factor Authentication using an authenticator app (like Google Authenticator or Duo) rather than SMS, since SMS can be intercepted through SIM swapping.
Audit connected third-party apps: Check your settings for connected third-party tools, plugins, or unauthorized integrations, and revoke access for anything unfamiliar.
Notify your WolfPack specialist team: If this is a business account linked to Meta Business Suite, let your WolfPack specialist team know so they can audit user permissions, check connected ad accounts, and verify that payment methods weren't exploited.

Questions?

If you're working through an account recovery and need help, your WolfPack specialist team is available through the Customer Portal or by replying to any email from the team.