How to Report a Hacked Facebook Account in 2026
If your Facebook account was taken over, acting quickly can reduce damage and improve your chances of recovery.
This guide explains how to report a hacked Facebook account, what Meta looks for, and which security steps to take right away.
A compromised account can be used to send spam, steal personal data, scam contacts, or lock you out entirely.
The sooner you report it, the faster you can limit the impact and start the recovery process.
What counts as a hacked Facebook account?
A hacked account is one that someone else accessed without your permission.
In many cases, the attacker changes the password, email address, phone number, or recovery settings to keep you out.
Common signs include:
- Unexpected password reset emails or login alerts
- Posts, messages, or friend requests you did not send
- Profile changes such as a new name, photo, or contact details
- Being logged out of Facebook on all devices
- Security emails showing unknown devices or locations
How to report a hacked Facebook account
Meta provides a dedicated recovery flow for compromised accounts.
Use it as soon as you suspect unauthorized access.
- Go to the Facebook recovery page for hacked accounts.
- Select the option that says your account was compromised.
- Enter the email address or phone number linked to the account.
- Follow the prompts to verify your identity and review suspicious activity.
- Reset your password if Facebook allows you to regain control.
If you can still log in, you can also go directly to the Security and Login area in Facebook settings and change your password immediately.
That can stop ongoing access if the attacker has not fully locked you out.
What if you cannot access your email or phone number?
If the attacker changed your contact information, you may need to prove ownership using alternate recovery methods.
Facebook may ask you to confirm identity through a trusted device, a previously used browser, or government ID verification in some cases.
Helpful actions include:
- Check your email inbox for Facebook alerts about changes to your account
- Use a device where you were previously signed in
- Try recovery from a home network or familiar location
- Review any backup codes you saved earlier
If you no longer control the email address on the account, secure that email account first.
An attacker who controls your email can keep resetting passwords and intercepting recovery messages.
How to secure your Facebook account after reporting it
Once you regain access, strengthen the account immediately.
Recovery alone does not guarantee safety if the attacker left backdoors behind.
- Change your password to a strong, unique one
- Log out of all devices in Facebook settings
- Review email addresses, phone numbers, and recovery options
- Remove unfamiliar devices and browser sessions
- Turn on two-factor authentication with an authentication app or security key
- Check connected apps and remove anything you do not recognize
Also review your Facebook and Meta Accounts Center settings for linked Instagram, Messenger, and other connected services.
A compromise in one account can spread to the others if they share credentials or recovery methods.
How to report suspicious activity to Facebook from another account?
If you cannot open the hacked profile directly, you can still report it from a friend’s account.
This is useful when the attacker is impersonating you, messaging contacts, or posting harmful content.
Ask a trusted friend to:
- Visit the hacked profile
- Select the menu or three-dot options
- Choose Report profile or Find support or report
- Select hacked account, impersonation, or another relevant option
This does not replace the recovery process, but it can help Facebook detect abuse faster.
If the attacker is using your account to scam others, ask affected contacts to report the messages as well.
Can you report a hacked Facebook account to support?
Facebook support is largely automated for personal accounts, so there is usually no direct live chat for standard recovery cases.
Most users must use the account recovery tools, identity checks, and security forms provided in the Help Center.
If the account belongs to a business, page admin, or ad account, additional support routes may be available through Meta Business Suite or Ads Manager.
Keep in mind that response times can vary, and documentation such as screenshots, login alerts, and identity proofs can help during review.
How long does Facebook account recovery take?
Recovery time depends on how much access the attacker changed and whether you still control your email or phone.
Some users regain access in minutes, while others need several days if identity verification is required.
Factors that affect recovery speed include:
- Whether the email address on the account was changed
- Whether two-factor authentication was enabled before the hack
- Whether Facebook recognizes your device or location
- Whether you can complete identity verification quickly
How to prevent another Facebook hack
After an incident, prevention matters as much as recovery.
Many Facebook compromises happen because the same password is reused across multiple sites or because phishing emails trick users into entering credentials on fake login pages.
- Use a password manager to generate unique passwords
- Enable two-factor authentication on Facebook and your email account
- Avoid logging in from links in messages or emails
- Check the URL before entering credentials
- Review app permissions and revoke access to unfamiliar tools
- Keep recovery emails and phone numbers current
Watch for phishing attempts that imitate Meta, Facebook Security, or “copyright violation” warnings.
These messages often pressure users into clicking quickly without verifying the source.
When to alert friends, family, and coworkers
If the hacker used your account to send messages, post links, or request money, notify your contacts right away.
A short warning can stop a scam from spreading.
Tell them to ignore suspicious requests from your account until you confirm it has been restored.
If you manage a business page, also inform teammates who share admin roles so they can review permissions and activity logs.
Helpful evidence to save before or during recovery
Documentation can support your report and help you track what changed.
Save evidence before deleting messages or resetting devices.
- Security alert emails from Facebook or Meta
- Screenshots of unauthorized posts or messages
- Approximate time the compromise started
- Names of changed email addresses or phone numbers
- Any suspicious login locations or device names
Keeping a record also helps if the attacker used your account for fraud, impersonation, or abusive content.
In serious cases, that information may be useful for platform review or external law enforcement reports.
How to report a hacked Facebook account if your identity is being impersonated?
If the attacker created a clone profile or changed your account details to impersonate you, use Facebook’s impersonation reporting tools in addition to the hacked-account recovery flow.
Impersonation reports help remove fake profiles that may be targeting your friends or customers.
Provide clear evidence of identity, such as your original profile link, government-issued ID if requested, and links to fake accounts.
The more precise your report, the easier it is for Meta to compare the fraudulent profile with your genuine account.