Facebook Account Hacked? Recover Access Without Losing More Data
Quick answer: Open Facebook’s official hacked-account route and secure the connected email. After regaining access, inspect business permissions and payment activity as well as the personal profile.
Understand the issue
A takeover creates two problems: restoring control and preventing the attacker from regaining it. Secure your email account first, since a compromised inbox can defeat password changes. Notify teammates if the account manages Pages or ad assets.
Steps to take
Open https://www.facebook.com/hacked from a trusted device and follow the official account recovery path. Check your email for account changes and verify messages by inspecting their source. If Facebook offers identity confirmation, follow it through Facebook itself. Once you regain access, reset the password, review sessions, remove unknown admins or connected apps, and enable two-factor authentication.
Contain damage beyond the login
Make a brief inventory of what the profile controls: Pages, ad accounts, business access, and other services using the same compromised email. Notify authorized coworkers through a channel the attacker does not control. Do not circulate the old password as a way for teammates to “check” the account.
Save evidence of unexpected role changes, messages, ads, or charges before making routine cleanup changes. Keep payment records private and contact the relevant payment provider through a known channel if money is involved. Distinguish an unauthorized charge report from a platform account review; they may need different evidence.
When access returns, remove only permissions and connections you have identified as unauthorized, taking care not to lock out legitimate administrators. Check recovery contacts and security settings. Ask customers to ignore scam requests through an established public channel if necessary, without publishing private screenshots that expose other people’s details.
If the first step does not resolve it
If the attacker changed Page roles or business permissions, document the asset and involved accounts. Recovering a personal login does not necessarily restore every business permission automatically; review each affected asset separately.
Avoid this mistake
Do not give your login code to anyone who says it is needed to 'verify recovery' outside Facebook.
Frequently asked questions
Can a Facebook hack affect my business assets?
Yes. Check Pages, ad accounts, payment methods, and associated administrators after the personal account is secured.
Should I create another profile to pretend to be the original administrator?
Do not use deceptive identities or share accounts. Use official recovery and authorized business access while the original profile is being assessed.
Contact BanUnban
Email the takeover timeline and the business assets affected if you need help organizing the incident. Do not share passwords.
Related reading
For a different issue, read our guide to post-recovery security.
Official sources and verification
Guidance is limited to the sources and options available. Platform screens, eligibility and outcomes vary.