How to tell you have been hacked
The signs are often obvious once you look: you cannot log in, your password, email or phone number was changed, or videos, messages or comments appear that you did not post. Friends may tell you they received strange messages from you asking for money or codes.
Sometimes the signs are quieter, like login alerts from a device or location you do not recognise. Take those alerts seriously, even if everything else looks normal.
If you can still log in
Change your password straight away to a long, unique one you have never used elsewhere. Check that the email address and phone number on the account are still yours. Then look at the list of logged-in devices in your security settings and remove any you do not recognise.
Turn on two-step verification so a password alone is not enough to get in. Delete any posts or messages the hacker created, and check whether any third-party apps were connected without your knowledge.
If you are locked out
Use the 'forgot password' or account recovery option in the app and follow the steps for your email or phone number. If the hacker changed those details, look for the option to report a hacked account or contact support through the app or help centre. Be ready to prove the account is yours, for example with old login details or information about your content.
Only use official recovery routes. People in comments or DMs offering to 'recover your account' for a fee are usually scammers.
Secure the rest of your digital life
Hackers often get in through a reused password or a compromised email account. Change the password on the email linked to your account first, then on any other service where you used the same password. A password manager can help you keep unique passwords without memorising them.
Check your phone for apps you do not recognise and keep its software updated.
Tell your followers and learn from it
Post a short message, or ask a friend to share one, saying your account was hacked and people should ignore messages sent from it. Think about how the hacker got in, such as a phishing link, a shared password or a third-party app, so you can close that door for good.
Frequently asked questions
Will I get my account back for sure?
Recovery is often possible through official support, but it is not guaranteed and can take time. The faster you act and the more proof of ownership you have, the better your chances.
Should I make a new account straight away?
Try official recovery first, because a new account loses your followers and history. If recovery fails, start fresh with a strong password and two-step verification from day one.