A hacked Facebook account can be used to message friends, run scams, change recovery details or take over connected business pages.
Prepared and reviewed by IT Life-Raft
UK-based IT support and cyber recovery guidance. Last reviewed September 2026.
Use Facebook's official recovery route and avoid anyone asking for payment, codes or remote access to get the account back.
If you've been hacked, start with our step-by-step recovery checklist. It explains what to secure first, how to protect your email and accounts, what evidence to keep, and what to do next.
Recovery checklistIf this is happening, preserve evidence and move carefully before deleting messages, wiping devices or changing settings from a suspect device.
If this is happening, preserve evidence and move carefully before deleting messages, wiping devices or changing settings from a suspect device.
If this is happening, preserve evidence and move carefully before deleting messages, wiping devices or changing settings from a suspect device.
If this is happening, preserve evidence and move carefully before deleting messages, wiping devices or changing settings from a suspect device.
Keep the order simple: contain the issue, recover control, then strengthen the account or device so the attacker cannot return.
Record what you changed and keep screenshots or reference numbers where possible.
Record what you changed and keep screenshots or reference numbers where possible.
Record what you changed and keep screenshots or reference numbers where possible.
Record what you changed and keep screenshots or reference numbers where possible.
Record what you changed and keep screenshots or reference numbers where possible.
If a Facebook business page or ad account is involved, check page roles, payment methods, connected Instagram accounts and Meta Business access.
If money, customer data, Microsoft 365, business email or a website is involved, get advice before wiping evidence or assuming the issue is closed.
These links help confirm the official recovery route. Use them alongside the checklist, especially when account recovery, fraud reporting or business data may be involved.
We cannot bypass Meta's recovery process, but we can help you use the right route and secure the email, device and accounts around it.
Be very careful. Many recovery offers are scams asking for money, codes or remote access.
Secure the email account linked to Facebook first, then check other accounts using the same password.
Tell us what happened, what is affected and whether money, customer data or business systems may be at risk.