For most of us, losing a WhatsApp, Facebook, or Instagram account feels like a nightmare. It is not just about missing out on funny memes; it is your photos, business pages, and private conversations that are suddenly in the hands of a stranger. When hackers take over, they aren't just looking around—they want to scam your friends, run fake ads with your card, or make you pay to get your account back.
When you get hacked, every minute counts. The longer you wait, the more settings the hacker will change to lock you out permanently. To beat them, you need to stay calm and follow a clear, step-by-step rescue plan to kick them out and lock your digital doors for good.
Reclaiming WhatsApp:
Kicking the Hacker Off Your Phone Number WhatsApp hacks usually happen when a scammer tricks you into sending them a 6-digit code, or when they break into your phone's voicemail. Because WhatsApp can only run on one primary phone number at a time, getting it back is actually very simple if you act fast.
Force the Hacker to Log Out:
If you still have access to your WhatsApp but notice weird messages being sent, someone might be using your account on a laptop. Immediately go to Settings > Linked Devices. Look at the list of devices, tap on any browser or computer you don't recognize, and hit 'Log Out.' This cuts their access instantly.
Log In Again on Your Phone:
If the hacker completely kicked you out, open WhatsApp on your phone and type in your number. Request the 6-digit verification code via SMS. The exact second you type that code into your phone, the hacker will be automatically booted off their device wherever they are in the world.
Dealing with the 7-Day Pin Lock:
If the hacker was smart, they turned on Two-Step Verification after they stole your account, and now WhatsApp is asking you for a PIN code you don't know. Don't worry. You will have to wait 7 days for that PIN to expire so you can reset it. However, because you did the SMS step above, the hacker is already logged out and cannot read your new messages while you wait.
Rescuing Facebook:
Bypassing Changed Emails and Passwords Facebook hacks are dangerous because scammers want your account to run fake ads using your money. The first thing they do is change your email address and password so the 'Forgot Password' button won't work for you. Here is how to beat that trick.
Find the Secret Recovery Link in Your Email:
The exact moment a hacker changes your Facebook email, Facebook sends an automatic alert to your *old* email address. Check your inbox (and spam folder) for an email that says 'Your email address has been changed.' Open it immediately and click the link that says 'If you didn't do this, please secure your account.' This link acts as a secret backdoor to reverse the hacker's changes instantly.
Use the Official Hack Portal:
If that email link doesn't work, don't try the normal login page. Go directly to facebook.com/hacked on a browser. Click 'Someone else gained access to my account' and follow the steps. If your password fails, Facebook will allow you to upload a photo of your ID (like a Driver's License or Passport). Their system will check your ID face against your profile pictures to hand your account back to you.
Reclaiming Instagram:
Proving It's Really You Instagram hackers love to change your username and post cryptocurrency scams on your page. Thankfully, your physical phone is the best weapon to fight back.
The Video Selfie Trick:
Open Instagram on your phone. On the login screen, tap 'Get help logging in' or 'Forgot password?'. Instead of typing the new username, type your original phone number or original email. Tap 'Need more help?' and follow the steps until it asks if you have photos of yourself on the account. Choose 'Yes, take a video selfie.' The app will ask you to look up, down, left, and right. Instagram will match your video face with your grid photos and return your account within 24 to 48 hours.
Check the Accounts Center Matrix:
Once you get back into your Instagram, go straight to the Meta Accounts Center settings. Hackers often link their own Facebook or Instagram profiles to yours so they can sneak back in later. If you see a strange account linked there, tap it and hit 'Remove' immediately.
Post-Incident Hardening:
Locking the Doors So They Can Never Return Getting your account back is only half the battle. If you don't seal the entry point, the hacker will just walk right back in. Follow these security steps immediately.
Clean Out Connected Apps:
Over the years, you have probably used 'Log in with Facebook' or connected your Instagram to random online games, websites, or apps. If one of those websites gets hacked, scammers can use that connection to enter your social media. Go to your security settings, find 'Apps and Websites,' and delete everything you don't use anymore.
Switch to An Authenticator App:
If you are still getting your security codes via normal SMS text messages, you are at risk. Scammers can hijack your phone number to steal those codes. Download a free app like Google Authenticator or Microsoft Authenticator, and set up your accounts to get security codes from there instead. These codes change every 30 seconds inside your physical phone, making it impossible for a hacker to intercept them remotely.
Re-establishing Sovereignty Over Your Social Nodes
Your social media pages are an important part of your daily life and business. Surviving a hack is all about moving quickly, refusing to panic, and using the right tools.
By keeping an eye on your original email inbox, using Meta's ID and video verification options, and setting up a strong authenticator app, you can easily turn your social media accounts from a vulnerable target into an impenetrable fortress.
Get new Security & Fraud alerts
One email when a new security & fraud article like this one goes live. No spam, unsubscribe anytime.
