Deepak Gupta

Instagram hacked and the email and phone number were changed

Open your original email and find the message from security@mail.instagram.com about the change. Select secure my account to reverse it. If the email and phone are both gone, go to instagram.com/hacked and follow the on-screen instructions. Instagram may ask for a video selfie to confirm it is you.

Do these 3 things now

1Search your original email for a message from security@mail.instagram.com and select secure my account.Read to them:“Search your original email for a message from security@mail.instagram.com and select secure my account.”
2If that does not work, go to instagram.com/hacked in a browser and follow the on-screen instructions.Read to them:“If that does not work, go to instagram.com/hacked in a browser and follow the on-screen instructions.”
3Do not reply to anyone who DMs or comments offering to recover your account. Instagram does not contact you about account security in DMs.Read to them:“Do not reply to anyone who DMs or comments offering to recover your account. Instagram does not contact you about account security in DMs.”

Secure your account at instagram.com/hacked

Official link: www.instagram.com

I am helping someone else

Helper mode: each step is written for you to read aloud. Let them tap and type on their own device; never ask them to send you a code. Send them this first.

01Is this you?

You got an email saying the email address on your account was changed, and you did not do it.
Password reset links now go to an email or phone you do not recognize.
Your old password no longer works.

Not quite? Only my password was changed · I also lost my email account · My phone number stopped working

02Official recovery path

When the email on an Instagram profile changes, Instagram sends a message to the original email with a special link to reverse it. Open your original inbox, including spam.Read to them:“When the email on an Instagram profile changes, Instagram sends a message to the original email with a special link to reverse it. Open your original inbox, including spam.”source
Check the sender is security@mail.instagram.com, then select secure my account in that message.Read to them:“Check the sender is security@mail.instagram.com, then select secure my account in that message.”source
If more than the email was changed and you cannot change it back, go to the login screen, tap Forgot password?, enter your username, and tap Send login link.Read to them:“If more than the email was changed and you cannot change it back, go to the login screen, tap Forgot password?, enter your username, and tap Send login link.”source
If you cannot reach the username, email or phone on the account, go to instagram.com/hacked and follow the on-screen instructions.Read to them:“If you cannot reach the username, email or phone on the account, go to instagram.com/hacked and follow the on-screen instructions.”source
When asked, give a secure email address that only you can access. Instagram sends its next steps there.Read to them:“When asked, give a secure email address that only you can access. Instagram sends its next steps there.”source
If your account has photos of you, record the video selfie Instagram asks for, turning your head as shown.Read to them:“If your account has photos of you, record the video selfie Instagram asks for, turning your head as shown.”source

Did that get you back in?

Yes

Lock it down now. Change the password, turn on two-step, sign out other devices. It takes about 15 minutes.

No

A.If you also lost access to your original email, ask your email provider to help you recover it first. Instagram says it cannot help you get back into your email.Read to them:“If you also lost access to your original email, ask your email provider to help you recover it first. Instagram says it cannot help you get back into your email.”source
B.If your account has no photos of you, Instagram's support team may email you to ask for the email or phone you signed up with and the device type you used then.Read to them:“If your account has no photos of you, Instagram's support team may email you to ask for the email or phone you signed up with and the device type you used then.”source
C.If your Facebook and Instagram accounts are in the same Accounts Center and allowed to log in to each other, you may be able to log in to Instagram with your Facebook login.Read to them:“If your Facebook and Instagram accounts are in the same Accounts Center and allowed to log in to each other, you may be able to log in to Instagram with your Facebook login.”source

Then: how long it takes

03How long it takes

No published timeline

Instagram does not publish a timeline for recovering an account. The reverse link only exists if the change was made from the Instagram profile page, so check your original inbox first.

While you wait

Recover and secure your original email account, because that is where Instagram sends recovery messages.
Ask your phone carrier whether anyone moved your number to a new SIM.
Keep every Instagram email and case detail in the incident log.

04Warn your contacts

Send this from another account or by text, so nobody falls for messages sent in your name.

My Instagram account was hacked. If it messages you asking for money, a code, or to click a link, it is not me. Please do not reply or click anything, and report the account. I will tell you when I have it back.

More templates: email, followers, customers

05Watch out for recovery scams

People who just lost an account are the main target of fake helpers. Only Instagram's own app or website can restore your account.

DMs from accounts calling themselves Instagram or Meta support. Instagram says it will never contact you about profile security through Direct Messages. How it works
"Recovery hackers" in comments and DMs who say they can get your account back for a fee. Only Instagram can restore an account, through instagram.com/hacked. How it works
Fake "copyright violation" or "verification" messages that say your account will be deleted unless you click a link and log in. How it works

All recovery scams and how to spot them

06Once you're back in: lock it down

0 of 9 doneAbout 18 minutes total

Change your password to one you use nowhere else2 minOn the web, click More > Settings > Accounts Center > Password and security > Change password, pick the account, and enter your current and new password. Instagram says to use at least 6 numbers, letters and punctuation marks. Changing it logs out every other device.source
Turn on two-factor authentication with an authentication app4 minClick More > Settings > See more in Accounts Center > Password and security > Two-factor authentication, then pick your account. Choose Authentication app, which Instagram recommends over text message. You can only turn on the app method from the Instagram app for iPhone or Android.source
Save your backup codes somewhere safe2 minIn Password and security > Two-factor authentication, pick your account, then click Additional methods > Backup codes. Save them offline. A backup code gets you in when a login code cannot reach you.source
Log out devices you do not recognize2 minIn Password and security, click Where you're logged in, pick your account, then click Select devices to log out. Select anything you do not recognize and click Log out.source
Check your email and phone number are yours1 minConfirm the email address and phone number in your account settings are correct and that only you can reach them. These are where Instagram sends login links and codes.source
Remove linked accounts you do not recognize1 minOpen Accounts Center and check which Facebook, Instagram and Meta accounts are added. Remove any account you do not recognize.source
Remove third-party apps you do not trust2 minClick More > Settings, then below Your app and media click Website permissions > Apps and Websites > Active. Click Remove next to anything you do not use or trust, especially apps that promised likes or followers.source
Secure the email account tied to Instagram3 minInstagram says anyone who can read your email can probably get into your Instagram too. Give that email account its own strong, unique password and turn on its two-step sign-in.source
Learn where to check real Instagram emails1 minClick More > Settings > Meta Account > Login and security > Recent emails. Security emails from the last 14 days are listed there. If a "security" email is not in the list, it did not come from Instagram.source

Then do the 24-hour cleanup.

Free toolExposure CheckSee what of yours is already public.Free toolPassword Breach CheckCheck if a password shows up in known leaks.ReadEmail hacked: 7 immediate steps ReadAccount recovery design is the security ceiling

07How it probably happened

Most likely
You entered your password on a fake login page, often linked from a scary DM or email.
How this scam works
Also common
Someone got into the email account tied to Instagram and used it to reset your password.
How this scam works
Less common
Someone took over your phone number and received your login codes.
How this scam works

Account taken, recovery details swapped

08Report it

Report an Impersonation Account on Instagram or Threads

Lost money, being blackmailed, or someone is using your account to scam others? Report it to your country's cybercrime service too. If you are in danger, call your local emergency number.

United States

FBI Internet Crime Complaint Center (IC3)Report online crime, including account takeovers that led to money loss or extortion. The IC3 never contacts you first and never asks for money.
FTC ReportFraudReport the scam to the Federal Trade Commission.
IdentityTheft.govUse it if someone used your Social Security number or opened accounts in your name. You get a recovery plan.

United Kingdom

Report Fraud (England, Wales and Northern Ireland)Run by the City of London Police. It replaced Action Fraud on 4 December 2025. In Scotland, call Police Scotland on 101 instead.
Forward scam texts to 7726Free on most UK networks. Your provider can look into the sender and block it.
Report a scam email to the NCSCForward the email to report@phishing.gov.uk before you delete it.
Report Fraud: 0300 123 2040England, Wales and Northern Ireland. In Scotland, call Police Scotland on 101.

India

National Cyber Crime Reporting PortalRun by the Indian Cyber Crime Coordination Centre (I4C), Ministry of Home Affairs. Reports go to state and UT police.
Chakshu on Sanchar SaathiReport suspected fraud calls, SMS or WhatsApp messages to the Department of Telecommunications. It is not for money already lost: call 1930 for that.
National Cyber Crime Helpline: 1930Toll free, 24 hours. Call fast if money left your account: it can help freeze the transfer.

Canada

Canadian Anti-Fraud Centre: report onlineVictims and witnesses can report fraud or cybercrime online. Also contact your local police as soon as you can.
Canadian Anti-Fraud Centre: 1-888-495-8501Toll free. The CAFC does not contact people to ask for money.

Australia

ReportCyberReport cybercrime to police. Your report may go to your state or territory police or the AFP.
ScamwatchReport a scam, even if you lost no money. The AFP also points people worried about identity theft to IDCARE, a free support service.
ReportCyber phone line: 1300 292 371Report concerns about cybercrime or cyber security incidents. If life is at risk, call 000.

09Questions people ask

How do I know the reverse email is really from Instagram?

Instagram says the email comes from security@mail.instagram.com. Official Instagram security emails come from domains like @mail.instagram.com, @support.instagram.com and @facebookmail.com.

Why did I get two emails about the change?

Instagram sends one email to the original address so you can deny the change, and one to the new address to allow it. Use the one in your original inbox.

What if I cannot get into my original email either?

Contact your email provider and use its recovery steps first. Instagram says it cannot help you get back into your email account.

Does Instagram keep my video selfie?

Instagram says the video is never visible on Instagram and is deleted within 30 days.

What will Instagram ask me to prove it is my account?

For an account with photos of you, Instagram may ask for a video selfie. For an account without photos of you, it may ask for the email or phone you signed up with and the type of device you used then.

Sources and last check

Last verified: October 16, 2026. Steps checked against the platform's own help pages listed below. Device testing is ongoing; steps marked unconfirmed are still waiting for it.

Instagram: My Instagram was Hacked (read 2026-10-16)
Instagram Help: Hacked Instagram account (read 2026-10-16)
Instagram Help: If you think your Instagram profile has been hacked (read 2026-10-16)
Instagram Help: Why you might be asked to upload a video selfie (read 2026-10-16)
Instagram Help: If you lost access to the email or phone number on your account (read 2026-10-16)
Instagram Help: I don't know how to log in (read 2026-10-16)
Instagram Help: Review recent emails sent from Instagram (read 2026-10-16)

Wrong step or changed screen? Report it. Never include passwords or codes.