TL;DR: Start with the FTC checklist: run security software, follow the platform's recovery page, then change your password, sign out of all devices and turn on two-factor authentication. Each platform below adds its own steps.
👉 Check my digital footprint — free 30-second check →
Every social and dating platform has its own recovery route, but the first hour follows one pattern. This guide combines the FTC's general checklist with the official steps each platform publishes.
Do this first, on any platform
The FTC's advice for a hacked email or social media account:
1. Update and run security software to check for malware before you start.
2. Follow the platform's own recovery instructions.
3. After you regain access, set a strong password, "sign out of all devices", turn on two-factor authentication and confirm the recovery email and phone number are yours.
4. Check your email for forwarding rules, review sent and deleted folders, and audit your friends list and messages.
5. Warn your contacts so they do not click suspicious links.
The FTC stresses that email matters most, because attackers can use it to reset passwords on other accounts. See the hacked email account guide and how to set up two-factor authentication.
Instagram, TikTok and LinkedIn
Their own help pages could not be retrieved for this guide, but the FTC page links to the official recovery pages for Instagram, LinkedIn and TikTok. Use those links, then complete the checklist above.
Snapchat
Snapchat says to change your password at accounts.snapchat.com using an SMS or email link, and to confirm the right email and mobile number are on the account. Signs of compromise it lists include login alerts from unfamiliar places, unknown sessions in Session Management, changes to your email, phone or two-factor settings, and posts you did not make. Terminate unknown sessions there, and check two-factor was not switched on without you. Snapchat also says never to share your password or My Eyes Only passcode with anyone.
Pinterest watches for logins from unusual locations, many logins in a short time and spammy behaviour. When it detects them it emails you, resets your password and logs out all active sessions. Reset your password (or use Google login if connected), then turn on two-factor authentication, update your email and use a unique password. If you get an unexpected security email, click "Lock my account" in that email, then change your password.
Reset your password at reddit.com/password. If your email was changed, enter the original address and reset from there. Submit a support request under "Security problems / I think my account has been hacked". The Account Activity page shows IP history and lets you log out of all sessions. Reddit lists unknown authorised apps and posts or votes you did not make as signs.
Discord
Reset your password and enable multi-factor authentication, then review Authorized Apps and remove any you do not want. Discord says you can temporarily change your email through the link in its "Discord Email Address changed" message. Report through dis.gd/hackedaccount. Discord warns that if you fail to secure the account, it may be unable to help recover it.
Telegram
Terminate sessions in Settings, under Devices (or Privacy & Security, then Active Sessions). Turn on 2-Step Verification under Privacy and Security, so both an SMS code and a password are needed, and set a recovery email. If you cannot log in, use telegram.org/support. If someone impersonates you, Telegram points to @NoToScam.
Grindr
Grindr lists an inability to log in, changed photos or profile information, unsolicited chats and unexpected favourites or blocks as signs. If you still have your Grindr email, send yourself a reset link. If access is lost, contact support with a screenshot of the compromised profile, the profile favourited, your Grindr email and a transaction ID if you pay. You can also secure the app with a PIN or biometric login.
OkCupid
OkCupid lists replaced photos or essays, a changed email, unauthorised purchases and unfamiliar conversations as signs of takeover. Reset your password at okcupid.com/lostpassword or in Account Settings, and add a phone number to enable two-factor login by SMS. Support covers a changed email and refunds for unauthorised charges.
After recovery
Take a moment to see who else can reach you: a hacked dating profile is often used for the scams in the dating app romance scam guide. For Facebook and X, see the Facebook and X guides.
Hackers often get in with a password that already leaked in an old breach. A free digital footprint check shows whether your email or number appears in exposed data.
Frequently Asked Questions
What is the first thing to do if my social media account is hacked?
The FTC says to update and run security software, follow the platform's recovery instructions, then change your password, sign out of all devices and turn on two-factor authentication.
Why does my email matter so much?
The FTC says attackers can use your email to reset passwords on other accounts, which can lock you out of multiple services.
How do I stop a hacker who is still logged in?
Use the platform's session or device list. Snapchat has Session Management, Reddit has Account Activity, and Telegram has Devices under Settings.
What does Pinterest do when it detects a compromise?
It emails you, resets your password and logs out all active sessions.
Where do I report a hacked Discord account?
Discord's official form is dis.gd/hackedaccount.
Should I warn my contacts?
Yes. The FTC advises telling your network so they do not click malicious links sent from your account.
Sources
- FTC – How to recover your hacked email or social media account
- Snapchat – My account is compromised
- Pinterest – We protected your account
- Reddit – Hacked or compromised account
- Discord – Account hacked or compromised
- Telegram FAQ
- Grindr – Keeping your account secure
- OkCupid – Someone has taken over my account