Someone hacked my Instagram, how can I recover it?
Last reviewed: 2026-08-01 · Checked with Hunch’s on-device engine, the same one inside the extension. How Hunch checks →
Part of our guide: What to do if you got scammed →
Instagram accounts are recoverable, and there's a dedicated flow for exactly this. The way in was almost certainly a fake security alert linking to a lookalike host such as instagram-secure-verify.example rather than instagram.com. Start at Instagram's official hacked-account page, request a login link or security code, and revoke the sessions you don't recognize.
Got a message like this? Paste it here →
Creators, influencers, and small brands are prime targets because their followings can be resold or used to push crypto scams. The fake login alert works by imitating Instagram's security emails and adding a 24-hour deadline, pushing even careful users to type their password on a lookalike domain before checking it.
Illustrative example of the pattern, not a real message someone received.
How to verify it yourself
- Confirm the alert's real source, Instagram never asks you to "verify" on a host like instagram-secure-verify.example.
- Open instagram.com/hacked yourself and choose the recovery path that matches (locked out, changed email, or impersonation).
- Check your email inbox for a genuine "your email was changed" notice, it usually contains a revert link.
- Review Settings > Accounts Center > Password and security > Where you're logged in for unknown devices.
Common questions
The hacker changed my email, can I still get in?
Yes. Instagram's hacked flow can send a login link or code to your original email or phone, and the "your email was changed" message from Instagram itself usually has a one-tap revert button.
Why did Instagram let this happen?
It generally wasn't an Instagram failure. You were phished into entering your password on a lookalike page, so the attacker simply logged in as you.
Can I recover a business or creator account the same way?
Yes, the same instagram.com/hacked flow covers professional accounts, and you can also recover through a linked Facebook or Accounts Center identity.
How do I keep my followers safe meanwhile?
Warn contacts on another platform that your account may be posting scams, and don't send money or codes to anyone claiming to be you until you're back in control.
If you already responded
- Go to instagram.com/hacked (type it in yourself) and request a login link or security code.
- Reset your password and, in Where you're logged in, log out every device you don't recognize.
- Use the "revert email change" link in Instagram's own notification if the attacker swapped your email.
- Enable two-factor authentication and reconfirm your recovery email and phone number.
- No legitimate recovery service cold-calls you or charges a fee, ignore any "Instagram recovery expert" asking for payment.
If you were already hit, expect a follow-up
One more thing to expect: after a scam, your details often land on lists that get reused, so you may be contacted again, sometimes by people posing as investigators, your bank's "fraud team," or "recovery agents" who promise to get your money back for an upfront fee. That follow-up is a second scam. No legitimate service charges a fee to recover funds.
Source: Instagram, Hacked accounts
Hunch is not affiliated with Instagram. Instagram is named only to describe a scam that impersonates it; the real Instagram does not send these messages.