Facebook Account Hacked? What to Do Now
TL;DR: If your Facebook account has been hacked, facebook.com/hacked is the fastest official recovery path. Here's the exact process, how to warn your contacts before the hacker messages them, and how to lock the account down afterward.
A hacked Facebook account is especially urgent because of how fast it can be used against people you know — scam messages sent to friends and family, often asking for money, usually within minutes of the takeover. Speed matters here more than with most account recoveries.
Signs Your Facebook Account Has Been Hacked
- You're logged out and your password no longer works.
- Posts, messages, or friend requests you didn't make.
- Your name, profile photo, or email on the account has changed.
- Friends mention receiving strange messages "from you."
Step 1: Go to facebook.com/hacked Immediately
This is Facebook's dedicated recovery flow for compromised accounts, separate from the standard "forgot password" page. It walks you through identifying the account and securing it, and is generally faster than general support channels.
Step 2: Warn Your Contacts Right Away
If you have any other way to reach close contacts — WhatsApp, a text message, a call — let them know your Facebook is compromised and not to trust messages or money requests from it until you confirm you're back in control. This single step prevents most of the real damage a hacked Facebook account causes.
Step 3: Once You're Back In
- Check "Where You're Logged In" under Settings → Security and Login, and log out any unfamiliar session.
- Review recent activity — delete any posts, messages, or ads you didn't create.
- Check linked apps under Settings → Apps and Websites, and remove anything unfamiliar.
- Change your password, and make sure it isn't reused anywhere else.
- Turn on two-factor authentication under Security and Login.
If Instagram Is Linked or Also Affected
Facebook and Instagram accounts are often connected, and a compromise can spread between them. See Recovering a Hacked WhatsApp or Social Account for the Instagram-specific recovery steps alongside this one.
If You Can't Get Back In
Use Facebook's "Find your account" flow with your phone number or email, and if that fails, the platform's identity-confirmation process (sometimes requiring a photo ID) is the fallback route. It's slower, but it works for accounts that have been fully locked out.
After Recovery
A Facebook hack often traces back to a phishing link or a reused password from another breach. Checking your wider exposure helps you understand whether this was isolated or part of something bigger.
Checking Your Broader Exposure
Scan My Shadow checks your phone number and email across 1,500+ sources and shows you exactly what's publicly exposed — useful context after any account takeover.
Not hacked but getting threatening texts? Read about the FINAL WARNING Facebook text scam.
Sources
Related Reading
- Recovering a Hacked WhatsApp or Social Account — the Instagram and WhatsApp recovery steps too
- Twitter/X Account Hacked? What to Do Now — recovery steps if X is also affected
- Google Account Hacked? What to Do Now — if your linked email is compromised too
- How to Make Facebook Private
- How to Report a Fake or Impersonation Account (FB, IG, X)
- How to Log Out of All Devices: Gmail, Facebook, Netflix, More
- “Is This You in This Video?” Facebook Messenger Scam Explained
After securing your accounts, check how much of your personal information is already exposed: Check your digital footprint free.
FAQs
What is facebook.com/hacked?
It's Facebook's dedicated recovery flow for compromised accounts — faster and more specific than the general password reset page.
Why should I warn my contacts before I've even recovered the account?
Because hacked Facebook accounts are often used within minutes to scam friends and family — a quick warning through another channel prevents most of the real damage.
What if I can't get back in at all?
Use Facebook's 'Find your account' flow, and if that fails, the identity-confirmation process — sometimes requiring a photo ID — is the fallback route.
Should I check Instagram too?
Yes, if it's linked to the same Facebook account — a compromise can spread between them.
How do I stop this from happening again?
Turn on two-factor authentication, use a unique password, and review connected apps regularly under Settings.
Hacked-friend messages spread on Instagram too; see common Instagram scams.
Use a password leak check to see whether the old password is circulating.
Curious what's already out there about you? Scan My Shadow checks your phone number and email across 1,500+ sources and sends you a clear report — no guesswork, just facts. Start your scan.
See if your email has already leaked
Check my email free →- Checks your email against known data breaches
- Shows which sites leaked it, and when
- Shows what leaked: passwords, phone, address
- Result on screen in about 30 seconds
- We don't store the email you check