instagram account hacked how to recover · login link · video selfie · instagram.com/hacked
Instagram account hacked — how to recover it depends on one thing: what on the account is still yours.
Reconstruction for explanation · not a real Instagram screen
Every working route is Instagram's own and runs through the login screen, your email or instagram.com/hacked. This page sorts those routes by what you still have, says where each one ends, and names no deadline that Instagram's help does not name.
Recovery routes
Instagram's official starting point for a hacked or locked account is instagram.com/hacked. Below, its options are sorted by what you still have — that sorting is ours, not an order from Instagram's help, and you can begin with whichever matches. Two of them have pages of their own, so here they are one line and a link; the other two are covered in full on this page.
If the email or phone on the account still reaches you, this is an ordinary password reset rather than a recovery case.
The limit If the mailbox itself is now in someone else's hands, Instagram cannot help with it: the inbox has to be won back from the email provider first.
The reset, step by stepA changed email is not final while you can still read the old inbox: Instagram writes to it from [email protected] with a link that undoes the change.
The limit If the old inbox is gone as well, see “No email and no phone”.
The email-changed walk-throughThis is the step Instagram's help gives when the login link did not get you in. Instagram's help says to make this request from a mobile device.
The limit Until the check ends, the account stays closed to you. Instagram's help sets no time for the review, and this page does not invent one.
Who is asked for a video selfieInstagram's help puts the limit in one sentence: if you cannot reach the sign-up email and the account is not linked to Facebook, “we're unable to give you access to the account”. Three things can still change the picture.
The limit What comes after that first screen is not listed in Instagram's help, so this page does not describe its branches. Anyone selling a way past the sentence above is selling something Instagram's help does not know of.
Open instagram.com/hackedGetting in again does not mean you are alone in the account: someone else's email, session or app may still be attached.
Instagram video selfie
The video selfie is not a step for everyone. Instagram asks for it when support is requested for an account that has photos of its owner. You record a short video turning your head in different directions.
Instagram explains why it is a video and not a photo or a document: “photos and IDs can be digitally modified”. It also says the video is never posted on Instagram and is deleted within 30 days. That is the only period Instagram's help names in the whole recovery process.
If the video is not accepted, you can send a new one. If it is, you may receive an email with a link to reset the password.
“Stated” and “Not stated” are our marks for what Instagram's help says, not lines of the interface.
Offers you will meet
These are the offers that surround a hacked account, and what stands behind each.
“Instagram support number: call or message us and we unlock the account.”
The Instagram help articles on hacked accounts that we read give no phone number: every route runs through the login screen, your email and instagram.com/hacked. Instagram also says it never contacts people about profile security through Direct. India's 1930 is a real helpline, but for reports, not for unlocking accounts — see below.
“Recovery agent, Meta specialist, ethical hacker: your account back for a fee.”
Bitdefender describes the pattern: a fee up front, then more for “server access”, “verification”, “software”, “final activation”; a fake login page; a request to forward a code. Instagram's help names no outside service that can restore access.
“Forward me the code Instagram just sent you, I need it to verify you.”
A login link or a security code is the key to the account, sent to you because someone entered your username. Whoever receives it logs in. No route in Instagram's help includes giving a code to another person.
“Pay, and I will give the account back.”
This comes from the person holding the account. Trend Micro, which documented these takeovers, reports that the owners were extorted, their contacts received the same bait and the accounts were resold — and that paying did not return them.
“Instagram Security: confirm your login here to restore the account.”
Instagram describes phishing as a message or link built to draw out personal data, often with a threat to block or delete the account, and asks to forward such messages to [email protected]. The emails it really sent are listed in the app under Recent emails for 14 days — which you can check once you are back in. Until then, reach the login only through the app or by typing instagram.com yourself.
The other side
With both changed, login links and reset emails stop reaching the owner.
Where the owner stops it The message from [email protected] in the previous inbox reverses the email change.
Trend Micro: the taken account is used to send the same message to the owner's contacts.
Where the owner stops it Tell people through another channel that the account is not in your hands and that links from it should not be opened.
The owner is told to pay to get the account back. In the cases Trend Micro describes, paying did not return it; accounts were also resold.
Where the owner stops it Do not pay. Recovery runs only through Instagram's routes.
Profiles calling themselves “account recovery”, “Meta specialist” or “ethical hacker” offer to return the account. Bitdefender: advance payments, a fake login page, a request for the code.
Where the owner stops it No codes to anyone, no login on a page someone sent you.
If money was taken or someone is impersonating you, that is a matter for a police report as well — see the section on reporting below.
Back in
Go through the settings with this list. The result is the order in which to fix things — not a verdict on whether someone still has access.
So it does not happen twice
Instagram's floor is 6 characters, with 8 or more advised; NIST puts the minimum for a password that stands on its own at 15. Check the one you choose.
You should see: every other session ends the moment it is saved.
Instagram's warning: “Anyone who can read your email can probably also access your Instagram account.” Give that mailbox its own password and second factor.
Locations that look wrong are explained on the page about the list of logins.
The authentication app is the method Instagram recommends. Backup codes are issued only to someone who is logged in — you, now — and Get new codes voids any set taken before. The methods compared.
Remove apps you did not connect and profiles that are not yours. Instagram lists both checks for a profile that posts what its owner did not write; the article is written for Threads, which uses the same Instagram login.
Recovery, in facts
| Question | What Instagram's help says | What follows |
|---|---|---|
| How long does the link in the security email work? | No period is given. | Use it at once. A number quoted elsewhere is not from Instagram's help. |
| How long does a recovery review take? | No time is given. | Anyone naming “24 hours” or “three days” is not quoting Instagram. |
| What happens to the video selfie? | It is never posted on Instagram and is deleted within 30 days. | This is the one period the help does name. |
| The video selfie was rejected. Is that the end? | You can submit a new video. | Record it again, turning your head as asked. |
| Why a video and not a photo of my ID? | “Photos and IDs can be digitally modified.” | Instagram's check for this case is the video. A stranger asking you to send an ID “for Instagram” is not part of it. |
| Can I use the account while the check is under way? | No — there is no access during the check. On success you may receive an email with a link to reset the password. | Watch the secure email address you gave, not Direct. |
| No sign-up email and no linked Facebook? | “We're unable to give you access to the account.” | Get the mailbox back from the email provider first; then instagram.com/hacked. |
For readers in India
If money was taken from you or your contacts, or someone is using the account to pass as you, it is also a matter for a report in India — through the 1930 helpline or cybercrime.gov.in. What these two channels are and who handles a report.
A report does not reopen the Instagram account. Access comes back only through the routes above, so file the report and keep working through them at the same time.
Questions
Instagram's official entry point is instagram.com/hacked. Otherwise start from what you still have: a login link if the email or phone on the account still reaches you; the reversal link in your previous inbox if the email was changed; a security code or support from a phone if the link did not help. That sorting is ours, not Instagram's.
Partly. instagram.com/hacked opens in a browser on a computer or a phone. The request for a security code or support, though, is made from a mobile device, as Instagram's help describes it.
Instagram's help says that without the sign-up email and without a linked Facebook it cannot give access. What remains is to win back the mailbox from its provider, or a linked Facebook, and then instagram.com/hacked with its identity check.
The entry point Instagram's help gives is instagram.com/hacked, opened in a browser. The help articles we read name no other form. A “recovery form” link sent by a stranger or found in an ad is not it.
No. Instagram asks for a video selfie inside its own support flow, and only for accounts that have photos of their owner; accounts without them get questions about the sign-up email or phone and the device instead. A selfie request in Direct, WhatsApp or a call is not part of that flow.
No. This page covers accounts that were taken over or cannot be logged in to. The help articles we read for it do not describe appeals for disabled accounts or the return of deleted ones, so we do not describe them.
Take it with you
Print the page or save it as a PDF to keep the steps next to your phone while you go through the settings. Your checklist ticks are included.
Where next
