Hacked Instagram Accounts Disabled After a Takeover
What Happened
The client's personal and business Instagram accounts were taken over by someone else. After the takeover, the accounts were disabled for a serious policy violation that the client did not commit, and the app no longer offered an option to request a review.
Our Approach
We reviewed the platform notices and the client's timeline, then prepared a formal appeal and submitted it to Meta through its official channels. It explained the takeover, separated the intruder's activity from the client's own use of the accounts, and asked Meta for a manual review and for the account data to be preserved.
Result
The client's personal account was restored, and later the client was able to log in to the business account again. Access to one further account is still pending. Meta does not explain its decisions, so we cannot say exactly what led to each restoration.
What others can learn from this case
- If your account was disabled after a takeover, say so clearly in your appeal and explain which activity was not yours.
- Keep the security emails the platform sent during the takeover, such as email or password change alerts. They show when someone else took control.
- Do not pay anyone who promises to "unban" or "hack back" the account. Use only the platform's official channels.
- Once you are back in, turn on two-factor authentication and remove any email address, phone number or device you do not recognise.