Finding out your Instagram account has been hacked — or worse, suddenly disabled — is one of the more stressful things that can happen on your phone. One minute you’re scrolling normally, the next you’re locked out, your profile picture and bio have changed, or a message tells you your account has been “disabled for violating our terms.” This guide walks through how to tell the difference between a hacked and a disabled account, the official recovery steps Instagram provides, and how to lock things down afterward so it doesn’t happen again.
What You’ll Need
- Access to the email address or phone number originally linked to your Instagram account
- The Instagram app installed on your phone, or access to instagram.com in a browser
- A government-issued photo ID, in case Instagram’s support flow asks you to confirm your identity with a video selfie or ID upload
- A few minutes of patience — some recovery flows take Instagram anywhere from a few hours to a few days to process
Step 1: Figure Out Whether You Were Hacked or Disabled
These two situations look similar but need different fixes. If you can no longer log in because your password stopped working, and you notice unfamiliar posts, DMs, or a changed email/phone number on the account, you’ve likely been hacked. If instead you see a message that specifically says your account has been disabled or suspended for violating Instagram’s Community Guidelines or Terms of Service, that’s a moderation action rather than unauthorized access, and it needs a separate appeal process.
Step 2: Recovering a Hacked Account
If someone else has gotten into your account, act quickly — the longer they have access, the more damage they can do (posting spam, messaging your contacts, or changing your recovery details).
- Try logging in first. On the login screen, tap “Forgotten password?” and enter your username, email, or phone number. If the hacker hasn’t changed your linked email or phone yet, you’ll receive a reset link or code.
- If your email or phone was changed, use Instagram’s dedicated “My Account Was Hacked” form (available in the Instagram Help Center under Managing Your Account). This flow asks for your username, the email or phone number you originally signed up with, and may request a short video selfie to verify it’s really you.
- Check your email inbox for a security alert from Instagram — these often include a direct “This wasn’t me” or “Secure my account” link that speeds up recovery significantly.
- Once you’re back in, immediately change your password, log out of all other sessions (Settings > Security > Login Activity, or the equivalent menu in the current app version), and review connected apps and linked accounts for anything unfamiliar.
Step 3: Appealing a Disabled Account
If Instagram disabled your account rather than a hacker locking you out, you’ll typically see an in-app message explaining the reason, with a button to request a review or submit an appeal. Fill this out as accurately as possible — Instagram’s systems (and human reviewers, in some cases) look at the context you provide. If you believe the action was a mistake, say so clearly and briefly rather than sending multiple repeat submissions, which can slow down review.
If you never received a specific reason and simply can’t log in, use the general Instagram Help Center support form for account access issues, which routes the request appropriately based on your answers.
Step 4: Confirming Your Identity
For accounts with a lot of followers, a business tied to them, or signs of suspicious activity, Instagram sometimes asks you to confirm your identity before restoring access. This can include a short video where you turn your head in different directions (used to compare against your profile photos) or, in some cases, uploading a photo of a government ID. This step exists specifically to prevent someone else from impersonating you to reclaim the account, so it’s a normal part of the process rather than a red flag.
Common Problems and Fixes
- Reset emails never arrive: Check spam/junk folders, confirm you’re checking the correct inbox (people often have more than one), and search for “instagram” rather than scrolling manually.
- The hacker changed the linked email and phone number: Use the “My Account Was Hacked” form rather than the standard password reset — standard reset won’t work once contact details are changed.
- You get stuck in a loop of automated messages: This is common with high-follower or business accounts. Continue through each step exactly as asked rather than restarting the process, since starting over can reset your place in the queue.
- Your appeal was rejected: Review Instagram’s Community Guidelines for the specific policy cited, and if you still believe it was a mistake, most appeal forms allow one follow-up submission with additional context.
Protecting Your Account Going Forward
Because account recovery involves proving your identity, the data safety choices you make now directly affect how easily you can get back in later. Turn on two-factor authentication (Settings > Security > Two-Factor Authentication) using an authenticator app rather than SMS where possible, since SMS codes can be intercepted through SIM-swapping. Keep your linked email and phone number current, use a unique password you don’t reuse on other sites, and periodically check Login Activity for sessions you don’t recognize. Avoid clicking links in DMs or emails claiming your account will be deleted unless you “verify” it immediately — this is one of the most common ways accounts get compromised in the first place.
FAQ
Q: How long does Instagram account recovery usually take?
A: It varies widely — some password resets are instant, while identity-verification cases can take anywhere from a few hours to several days depending on volume and how much verification is required.
Q: Can I recover an account with no linked email or phone number at all?
A: It’s much harder, but Instagram’s support form still allows you to submit your username along with any other identifying details, such as the account creation date or associated devices, for manual review.
Q: Will I lose my followers and posts if my account was hacked?
A: No — recovering access restores the account as it is. Content the hacker deleted, however, generally cannot be restored, which is another reason to act quickly.
Q: Is it safe to submit a photo ID to Instagram for verification?
A: Instagram states ID images used for verification are reviewed and then deleted after the process completes. If you’re uncomfortable submitting one, the video selfie option is available for many accounts as an alternative.
Steps and menu labels may change as apps update. Last updated: September 2026.