Copy-paste messages
Fill in the parts in [brackets]. None of these ask anyone for a code, a password or money. If a message you are about to send does, stop.
Warn your contacts (short)
WhatsApp, SMSSend from a different account or your phone's SMS as soon as you know.
Heads up: my [Instagram / WhatsApp / Facebook] account was hacked. If it messages you asking for money, a code, or to click a link, it is not me. Please do not reply or click, and report the account. I will tell you when I have it back.
Warn your followers (story or post)
Instagram, FacebookUse from a friend's account, a backup account, or once you are back in.
My account [@username] was hacked on [date]. Anything it sent you since then, including crypto offers, giveaways, or requests for codes, did not come from me. Please do not send money or codes, and report any message like that.
Warn your contacts (email)
EmailWhen your email account was the one taken over.
Subject: My email was hacked, please ignore recent messages Hi, Someone got into my email account [address] on or around [date]. If you got a message from me asking for money, gift cards, a payment, a code, or asking you to open a file or link, it was not from me. Please delete it and do not reply. If you already paid or clicked something, contact your bank and change your own password now. I am working to secure the account and will confirm when it is safe. [Your name]
Ask your carrier to check for a SIM swap
Phone call or storeYour phone suddenly shows no service, or codes stopped arriving. Call from another phone, using the number on your carrier's official website.
Hi, I think someone may have moved my phone number to another SIM without my permission. My number is [number] and the account holder is [name]. 1. Has a SIM change or a port-out been requested on my number in the last [7] days? 2. If yes, please reverse it and put my line back on my SIM. 3. Please add a SIM lock or port-out PIN to my account so it cannot be moved again without it. 4. Please note this as fraud on my account and give me a reference number. I will not share any one-time codes over the phone.
Appeal a disabled account
Official appeal formOnly use inside the platform's own appeal form. Never send it to an account that DMs you.
My account [@username], created around [year], was disabled on [date]. I believe it was taken over by someone else before it was disabled. On [date] I received an email saying my [email / password / phone] was changed, which I did not do. Since then the account [posted / sent messages] I did not create. I am the owner. I can confirm the original email [address] and phone [number], and I can complete identity verification. Please restore access so I can secure the account.
Summary for a police or cybercrime report
Cybercrime portal or policeIf you lost money, are being blackmailed, or someone is impersonating you to others. Fill in your incident log first.
Incident: account takeover of my [platform] account [@username / email]. When: first noticed on [date and time, time zone]. What happened: [the email/phone/password was changed; messages sent to contacts; money requested]. Losses: [none / amount, how it was paid, transaction IDs]. Platform case numbers: [list]. Suspect details I have: [usernames, phone numbers, wallet addresses, links they sent]. Evidence: screenshots and emails saved on [date]. I have reported the account to [platform] and warned my contacts.
Tell your customers
Email, website, other socialsFor a shop, creator or business account that was taken over.
Our [platform] account [@handle] was taken over on [date]. We are working with [platform] to get it back. Until we confirm here, please do not act on any message, offer, discount, giveaway or payment link from that account. We will never ask you for a code, a password, or payment through DMs. Questions: [official email or website].
Message to a relative you are helping
SMS, in personSend to the person who is locked out before you start, so they do not fall for fake helpers.
I am going to help you get your account back. While we work on it: do not reply to anyone who offers to recover it, even if they say they work for [platform]. Do not share any code that arrives by text or email with anyone, including me over chat. Only the [platform] app or website can restore your account.