If posts you never wrote are appearing on your profile, your password suddenly stops working, or you're getting emails about logins you don't recognize, your social media account may be hacked. Don't panic. Most accounts can be recovered if you act quickly and in the right order. Here is the step-by-step plan.
How to Tell Your Account Was Hacked
The most common signs of a takeover include:
- Posts, stories, or messages you did not make.
- A password that no longer works, even though you are sure it is correct.
- Emails from the platform about logins or password changes you do not recognize.
- Friends telling you your account sent them suspicious links or scam messages.
One sign alone can be a glitch. Two or more together almost always mean a real takeover. If the account is posting links about free prizes or urgent deals, that is the work of a scammer, and you can learn how to spot online scams while you clean up.
First, Try the Platform's Password Recovery
Start with the forgot-password option on the login screen. Choose the strongest recovery method the site offers, such as a code sent to your phone or an authenticator app, rather than email if you have a choice. If you get back in, change your password to a long, unique one right away. If recovery fails because someone changed your password or your contact details, move to the next step.
Check Your Email Account Before Anything Else
Attackers often take over the recovery email first, because it lets them reset passwords on every connected account. Sign in to your email and look for three things:
- Forwarding rules you did not set up, which silently copy your mail to the attacker.
- Filters that delete or redirect incoming messages, so password reset links never reach you.
- New recovery addresses or phone numbers added to the account.
Remove anything you do not recognize, change the email password, and sign out every other session. If your email itself is compromised, apply the same recovery steps you are using for social media.
Remove Unknown Recovery Info and Log Out Other Devices
Once you are back in, open the security settings and check the account's contact details. Remove any email address or phone number you did not add. Then sign out of all other sessions and devices. Most platforms have an active sessions page that lists every phone, computer, and location currently signed in. End each session you do not recognize. This pushes the attacker out before you change anything else.
Revoke Unrecognized Connected Apps
Scammers often link accounts to their own apps so they can keep posting even after you change your password. Open the section for authorized or connected apps and revoke anything you do not recognize. If you use a password manager or a trusted app later, you can reconnect it yourself.
If You Can't Get Back In
When normal recovery fails, use the platform's hacked-account flow instead. Most major social networks have one, often labeled hacked account or recover account. These flows ask you to prove your identity, sometimes with a trusted device, a backup code, or a photo ID, before control returns to you. The review can take a day or more, so be patient and answer accurately.
Tell Your Followers What Happened
If the account was used to post scams or spam links, share a brief notice. Say your account was hacked, that any recent links or messages were not from you, and that you have reported the account and are recovering it. This is not embarrassment, it is damage control. A short post keeps your friends from clicking a scam link.
Secure Every Other Account
Never reuse the password from the hacked account. If you used it anywhere else, change it there too, starting with email and banking. Then turn on two-factor authentication on every important account, so a stolen password alone is no longer enough to get in. Many takeovers start with a phishing link or harmful software, so check your devices as well. If you recently installed a browser extension that behaved oddly, follow a compromised browser extension incident plan to remove it and scan your system.
Report the Account
Report the takeover to the platform itself. Every major social network has a way to report a hacked or compromised account, and some also let you report the scam posts the attacker published. If money is involved or personal information is at risk, the FTC's IdentityTheft.gov site lists the steps to take based on what was lost.
FAQ
Can I get a hacked social media account back? Often yes, especially if you act fast. Use the platform's hacked-account recovery flow and answer its questions with accurate information, and the account is usually returned to you.
What if the hacker changed my password and my email? Go straight to the platform's hacked-account recovery page rather than the normal forgot-password option. Identity verification with a trusted device, a backup code, or a photo ID is what gets you back in.
Should I tell my friends my account was hacked? Yes, if it was used to post scams. A short notice that recent links were not yours is enough to stop people from clicking them.
Would two-factor authentication have stopped this? It makes a takeover much harder, because a stolen password alone would not be enough to get in. Set it up on your email and social accounts after you recover them.
Sources and further reading
---Written by Hassan Arshad, founder of UsefulOrbit. Last updated August 31, 2026.