Instagram Account Hacked? How to Recover It and Warn Your Followers

Short answer: if you can still log in, change your password at once and turn on two-factor authentication. If the hacker changed your email, open the email from security@mail.instagram.com and tap "secure my account". If you are fully locked out, go to instagram.com/hacked in a browser and follow the steps. Instagram may ask for a short video selfie to prove the account is yours. Never pay anyone who offers to "recover" it for you.

How do I know my Instagram was hacked?

The signs are usually obvious once you look:

• You get an email saying your email address or password was changed, and you did not do it.
• Your password no longer works.
• Friends message you asking why you posted about "investing with an account manager" or selling iPhones cheap.
• Stories, posts or DMs appear that you did not make.
• Your bio, name or profile photo has changed.

Move fast. Every hour the hacker holds your account, they can message your followers in your name.

If you can still log in: lock it down now

1. Change your password. Use one you have never used anywhere else.
2. Check your email and phone number. Make sure they are yours and fix them if not.
3. Turn on two-factor authentication. Go to your profile, tap the menu, then Accounts Center (Meta is renaming this Meta Account, so your phone may show either), then Password and security, then Two-factor authentication. An authenticator app is stronger than SMS, because SMS codes can be stolen through a SIM swap.
4. Remove strangers. In the same section, check where you are logged in and log out any device you do not recognise. Remove linked accounts and third-party apps you do not know.
5. Secure your email too. If your email password is weak or reused, the hacker can simply take Instagram again.

If the hacker changed your email address

When an email is changed, Instagram sends a message to the old address from security@mail.instagram.com. That email has an option to reverse the change and secure your account. Use it as soon as you see it. Before tapping, check the sender is exactly that address, because fake "Instagram security" emails exist too.

If you are locked out completely

These are the steps from Instagram's Help Centre:

1. On the login screen, tap Forgot password?
2. Enter your username, email or phone number and tap Send login link.
3. Complete the security check, then open the link sent to your email or phone and follow the prompts.
4. If you no longer have access to that email or phone, go to instagram.com/hacked on a phone or computer browser and choose the option that matches your situation.
5. When asked, give a secure email address that only you can open. Instagram sends the next steps there.

The video selfie check

If your account has photos of you, Instagram may ask you to record a short video selfie turning your head in different directions. It compares this with photos on the account. Instagram says the video is never shown on your profile and is deleted within 30 days. If it cannot confirm your identity the first time, you can submit a new video.

If your account has no photos of you, Meta Support may instead ask for the email or phone number you signed up with and the type of device you used then (iPhone, Android, iPad). Answer as accurately as you can.

Recovery can take from a few hours to several days. Keep checking the secure email you gave, including spam.

Backup codes: the five minutes that save your account

Once you have two-factor authentication on, Instagram gives you backup codes. Each one lets you log in once if your phone is lost or codes are not arriving. Find them under Accounts Center, Password and security, Two-factor authentication, choose your account, then Additional methods and Backup codes.

Write them on paper or save them somewhere safe off your phone. Never type a backup code into any page you reached from a DM or email. Phishing pages ask for them for exactly this reason.

Why hacked Ghanaian accounts get used to sell fake investments and iPhones

Hackers do not want your photos. They want your followers' trust. A message from a stranger is easy to ignore. A story from your cousin saying "I invested GH¢500 with this lady and got GH¢5,000 in two days, God is good" is not.

The common patterns:

• Fake investment testimonials. Stories showing screenshots of "profits" and tagging an "account manager". Switzerland's National Cyber Security Centre warned in 2026 that criminals now also make edited or AI videos of the real owner appearing to confirm the success.
• Cheap phone and gadget sales. "Relocating, selling my iPhone 15 Pro Max for GH¢4,000, MoMo only." There is no phone.
• Emergency requests. DMs to close friends asking for urgent MoMo, a "loan" until Monday or help with hospital bills.
• More hacking. Messages asking your friends to vote for you in a contest or open a link, which steals their accounts next.

Ghana's Cyber Security Authority has warned for years that taken-over social media accounts are used for investment fraud, online shopping scams, job scams and romance scams against the owner's contacts. The Bank of Ghana's October 2026 advisory also told the public to avoid and report impersonation accounts on social media.

How to warn your followers

• Post from another account. Use your WhatsApp status, Facebook, X or a friend's Instagram. Keep it plain: "My Instagram @yourname was hacked on Monday. I am not selling anything or promoting any investment. Do not send money to anyone using my account."
• Message your closest contacts directly. Family and people you often do business with are the first targets.
• Ask friends to report the account. From your profile, they can tap the three dots, then Report.
• If you sell on Instagram, tell your customers on WhatsApp that you will never ask them to pay into a new number while your account is down.

Once you are back in, delete the scam posts and stories, then post a clear notice on the account itself.

Never pay a "recovery expert"

As soon as you post "my IG was hacked", accounts will appear in your comments offering to recover it for a fee. These are scammers. Instagram's recovery happens in the app and at instagram.com/hacked, not through a stranger's WhatsApp, and nobody outside Meta can get into its systems. The official route is free.

What to do if a follower already sent money

If someone paid a scammer using your account, they should contact their MoMo provider or bank straight away to try to stop the money, and report to the Cyber Security Authority by calling or texting 292, WhatsApp 0501603111, or report@csa.gov.gh. Share the scammer's MoMo number, name on the wallet and screenshots.

You or they can also check a number, handle or website on TrustCheck and report it so the next person sees the warning. For broader steps, read how to report a scam in Ghana and how crypto P2P scams work.