What to Do If a Hacker Changed Your Instagram Email and Phone

Discovering that someone has breached your social media presence is unsettling, but realizing a attacker has altered your login credentials takes the panic to another level. When a malicious user gains access to your profile and swaps out your contact details, standard password reset links instantly become useless. Suddenly, you are locked out while someone else controls your digital identity. Fortunately, losing your linked credentials does not mean your profile is gone forever. Instagram has built specific security failsafes—including video selfie verification—to help legitimate owners reclaim a hacked Instagram account even after total credential hijacking.

Act Fast: Use Instagram Security Notifications

The moment an unauthorized user changes your login credentials, Instagram automatically sends an alert to your original email address. This message contains a critical safety net that many victims overlook in their initial panic.

Look for the Security Alert Email

Search your inbox for an official message from Instagram notifying you that your address was updated. Within that message, look for a link that says "secure your account" or "revert this change." If you click this link quickly enough, you can often revert the email change immediately and trigger a rapid password reset before the attacker locks you out permanently.

Checking your original inbox immediately for Instagram's automated change alert is your highest-probability chance at instant recovery.

How to Access the Account Recovery Request Menu

If the revert link has expired or failed, you must navigate through Instagram's alternative support channels directly from your mobile device. The desktop web version usually lacks the advanced recovery options required for stolen profiles.

Navigating the Mobile App Options

• Open the Instagram app on your iOS or Android device.
• On the login screen, select Get help logging in (Android) or Forgot password? (iOS).
• Type in your original username or the phone number previously associated with the profile.
• Instead of sending a reset link, tap Need more help? at the bottom of the screen.
• Follow the prompts indicating that you no longer have access to the email or phone number on file.

Verifying Your Identity via Video Selfie Verification

When contact details are wiped, automated systems cannot assist you. Meta relies heavily on facial recognition technology to manually match account owners with their posted content.

Submitting Your Facial Scan

If your account features photos or videos of yourself, Instagram will prompt you to submit a video selfie. You will be asked to turn your head in various directions to prove you are a real person. Meta's security team then uses automated systems and human reviewers to compare your facial features against the existing media on your grid. This process generally takes between 24 and 48 hours to process.

What If Your Account Has No Photos of You?

For personal accounts without face photos, brand pages, or meme channels, identity verification becomes more complex. In these scenarios, you will be asked to provide technical details, such as the device model used to create the profile, original signup emails, or previous usernames to prove ownership.

Reclaiming Control and Enforcing Ironclad Security

Once Meta verifies your claim, you will receive a single-use recovery link sent to a brand-new, uncompromised email address that you provide. Clicking this link lets you log back in and overwrite the hacker's credentials.

After regaining access to your hacked Instagram account, immediate lockdown procedures are mandatory:

• Revoke all unrecognized logged-in devices within the Account Center.
• Turn on two-factor authentication (2FA) using an authenticator app like Google Authenticator or Duo, rather than SMS.
• Generate and store offline backup codes in a safe physical or encrypted location.
• Change the password of the primary email account linked to your social profiles to stop secondary breaches.

Have you ever had to deal with a hijacked social media profile? Share your recovery experiences or tips in the comments below!