How to Recover a Hacked Instagram Account: Step-by-Step Guide (2026)

Discovering that your Instagram account has been hacked is one of the most stressful experiences on social media. Hackers may change your email, phone number, and password simultaneously, locking you out completely. The good news is that Instagram has improved its account recovery process significantly, and most accounts can be recovered if you act quickly and follow the right steps.

Signs Your Instagram Account Has Been Hacked

Before diving into recovery, confirm that your account has actually been compromised. Common signs include receiving an email from Instagram about an email address change you did not initiate, being unable to log in with your usual credentials, finding posts or stories you did not create, seeing DMs sent from your account that you did not write, noticing unfamiliar accounts followed from your profile, or receiving notifications about login attempts from unknown locations.

If you notice any of these signs, act immediately. The faster you respond, the higher your chances of successful recovery.

Step 1: Check Your Email for Instagram Notifications

When someone changes the email address associated with your Instagram account, Instagram sends a notification to your original email. This email contains a link that says "revert this change" or "secure your account." If you received this email and it has been less than a few days, click that link immediately — it is the fastest way to undo the hacker's changes and regain access.

Check your spam and trash folders if you do not see it in your inbox. The email comes from [email protected] — verify the sender carefully to avoid phishing attempts that mimic Instagram's emails.

Step 2: Request a Login Link

If the email revert link has expired or the hacker changed your phone number too, try requesting a login link. On the Instagram login screen, tap "Get help logging in" (Android) or "Forgot password?" (iOS). Enter your username, email, or phone number. Instagram will send a login link or security code to the associated contact method. If the hacker has not changed your phone number, you can receive an SMS code and regain access this way.

Step 3: Request a Support Request (Video Selfie Verification)

If you cannot access your email or phone number, Instagram offers identity verification through video selfie. On the login screen, tap "Get help logging in," then follow the prompts until you see the option to verify your identity. Instagram will ask you to record a short video selfie, turning your head in different directions. This video is compared against photos on your profile to confirm your identity.

This method works best if your account has photos of your face. For accounts without personal photos, Instagram may ask for additional verification such as the email address you signed up with, the device you originally registered from, or other account details.

Step 4: Use Instagram's Hacked Account Recovery Page

Instagram maintains a dedicated recovery page at instagram.com/hacked. This page walks you through the recovery process based on your specific situation. Select "My account was hacked" and follow the guided steps. You will be asked to provide your username, the email or phone number originally associated with the account, and what type of account it is (personal, creator, or business).

What to Do Immediately After Recovering Your Account

Once you regain access, take these security steps immediately to prevent future compromises.

• Change your password to something strong and unique — at least 12 characters with a mix of letters, numbers, and symbols
• Enable two-factor authentication using an authenticator app (not SMS, which can be intercepted via SIM swapping)
• Check and remove any unfamiliar devices in Settings → Security → Login Activity
• Review and revoke access for any third-party apps you do not recognize in Settings → Security → Apps and Websites
• Verify your email address and phone number are correct in Settings → Account → Personal Information
• Check your account for any changes: bio, profile picture, username, linked accounts
• Delete any posts, stories, or messages the hacker created

Common Hacking Methods and How to Prevent Them

Attack Method	How It Works	Prevention
Phishing DMs/Emails	Fake login pages steal your credentials	Never enter password on links from messages
Third-party app abuse	Malicious apps with Instagram access	Revoke access for unused apps regularly
Password reuse	Leaked credentials from other sites	Use unique passwords per service
SIM swapping	Attacker takes over your phone number	Use authenticator app instead of SMS 2FA
Social engineering	Hacker impersonates support or friends	Instagram never asks for passwords via DM
Public WiFi interception	Credentials captured on open networks	Use VPN on public networks

How Long Does Account Recovery Take?

Recovery time varies depending on the method. Email revert links work instantly if clicked within the valid window (usually a few days). Login link via SMS is immediate. Video selfie verification typically takes 1 to 3 business days, though some users report waiting up to a week during high-volume periods. The instagram.com/hacked process can take anywhere from 24 hours to two weeks depending on the complexity of your case.

Frequently Asked Questions

Can Instagram support help me recover my account by email?

Instagram does not offer email-based customer support for account recovery. All recovery is handled through the in-app flows and the instagram.com/hacked page. Contacting Meta's support channels may help for business accounts with linked Facebook pages, but personal accounts must use the standard recovery tools.

What if the hacker changed my username?

You can still recover the account using your original email or phone number. Instagram tracks accounts by internal ID, not username, so a username change does not affect the recovery process. If you know your old username, try searching for it — if it shows a different profile, the hacker renamed your account.

Should I create a new account and report the hacked one?

Creating a new account to report the hacked one is an option, but it should be a last resort. Focus on recovery first using the methods above. If all else fails, you can report the compromised account as impersonating you from a different account, which may trigger a review by Instagram's team.

Are "Instagram recovery services" legitimate?

No. Third-party services or individuals claiming to recover hacked Instagram accounts for a fee are almost always scams. They may ask for payment upfront and deliver nothing, or they may use the information you provide to further compromise your accounts. Only use Instagram's official recovery tools.