Having your Facebook disabled after being hacked feels backwards: someone else broke the rules, and your account took the penalty. Meta’s Help Center says a suspended account can be appealed within 180 days by logging in. Your job is to regain control, secure your email and show Meta, with dates, that the activity was not yours.
Suspended, Disabled or Locked: Which One Do You Have?
Meta tells you by email and on the login screen. While an account is suspended or disabled, nobody can see it and you can’t use it.
| Status | What you see | First move |
|---|---|---|
| Locked | A message that your account has been locked | Select Get started and follow the on-screen steps |
| Suspended | “We suspended your account” | Log in and appeal within 180 days (varies by region) |
| Disabled | “We disabled your account” | Read the notice; Meta says it tells you if another review is possible |
A lock is a security step after unusual activity. For the full appeal process, see our Facebook account suspended appeal guide; if the decision is already final, read Facebook account permanently blocked. Below is what changes when a hacker caused it.
Step 1: Secure Your Email First
Your inbox receives Meta’s security alerts, login codes and the appeal decision. If the attacker can still read it, they can undo every fix.
- Change the email password and turn on two-step verification with your provider.
- Sign out other sessions and remove forwarding rules or recovery details you didn’t add.
- Search the inbox and trash for Meta messages about a changed password, email or phone.
Meta says that when your account email changes, it sends the previous address a message with a special link to reverse the change. If the attacker replaced both email and phone, Meta points you to facebook.com/hacked on a device you’ve used before, or facebook.com/login/identify and “No longer have access to these?”, where you add contact details never used on the account. See what to do when a hacker changed your Facebook email and password.
Step 2: Gather Proof That the Hack Came First
Your appeal is stronger when the timeline shows a takeover before the violation. Meta’s own list of hack signs doubles as a checklist: posts or messages you didn’t write, a changed profile picture, login notifications that weren’t you, and emails about a new email, phone number or password.
- Meta security emails: keep the originals. If you can open Settings, facebook.com/recent_emails/security lists security emails from the last year.
- Login alerts: screenshots with dates and locations.
- The notice: a screenshot of the suspension screen and email.
- The attacker’s activity: ask friends for screenshots of scam posts or messages they received.
- Your timeline: last normal login, when you lost access, and any link you clicked first.
Step 3: Appeal Through Meta’s Official Flow
Meta says you appeal by logging in, where the prompt appears. Its help pages describe no separate track for hacked accounts, so explain the hack inside the normal appeal.
- Confirm the notice is real. Meta email comes only from domains such as facebook.com, fb.com, facebookmail.com, meta.com and metamail.com.
- If the password was changed, regain your login at facebook.com/hacked on a familiar device.
- Log in, read the notice and note the deadline.
- Follow the appeal prompt and complete any identity check.
- Add your short statement where the form allows, then submit once.
What to say when a hacker caused it
Stick to facts Meta can check against its own records: that this is your real account, the date you lost control, the Meta email or alert that shows it, what was posted that you didn’t write, and what you have secured since. For example:
“This is my personal account. On March 3, Facebook emailed me that my password was changed, which I did not do. Until March 5, someone else controlled the account and posted scam links I did not write. I have since secured my email and turned on two-factor authentication. Please review the suspension.”
Leave out anger, threats and copied templates.
Passing the identity check
Meta accepts one government ID showing your name with your birth date or photo, or two non-government IDs with your name, at least one showing a birth date or photo. Take a close-up in good light and don’t digitally hide anything; Meta says you may physically cover details it doesn’t need, such as an ID number. Extra documents can delay the review.
If Meta suspects someone accessed your account without permission, it may ask for a video selfie, which it compares with your profile photos, including previous ones. If no match is confirmed, a manual review or another method may follow. If the check keeps failing, see Facebook ID verification stuck.
Step 4: After Reinstatement, Remove What the Attacker Left
Attackers often leave access behind. Work through this list the same day:
- End unknown sessions: Accounts Center, Password and security, Where you’re logged in.
- Turn on two-factor authentication and alerts about unrecognized logins. Save the recovery codes.
- Clean the Activity Log: filter by date and delete posts you didn’t create.
- Remove unknown apps under Settings, Apps and websites.
- Check Account Status under Help & support for restrictions on your profile, Pages and groups.
- Review Pages and ad accounts. Confirm who has full control of each Page; Meta deactivates a Page left with no one in full control. In your ad account settings, check Ad account roles and Payment activity. Meta notes it may remove admins, pause ads or change payment methods after suspicious activity.
If a Page was taken over, see how to recover admin access to a hacked Facebook Page. If the ad account was disabled too, read why your Facebook ads account was disabled.
Common Mistakes That Make It Worse
- Opening a new account. Meta disables accounts created to get around its restrictions.
- Paying “unban” sellers. Only Meta can reinstate an account, and Meta notes that no reputable organization will demand payment on the spot. See how to spot fake account recovery services.
- Answering fake “Meta Support” emails. Report them to phish@fb.com and never share passwords or login codes.
- Appealing before your email is secure. The decision goes to that inbox.
- Waiting for the last days of the window. A missed deadline means a permanently disabled account.
When to Get Professional Help
If the attacker changed your email and phone, your ID doesn’t match the profile, or Pages and ad accounts depend on this login, a structured case helps. The AccRevert team reviews what happened, organizes your evidence and timeline, and prepares a documented recovery request and appeal submitted through Meta’s official channels. Only Meta decides the outcome, so no result is promised, and we never ask for your password or login codes.
Pricing: a flat $299 case-preparation fee opens a case; a success fee of $599 for personal accounts, $999 for business accounts or $1,199 for Business Manager and ad accounts applies only if access is restored. Payment is by PayPal only. See our Hacked Account Recovery service.
Frequently Asked Questions
Will Facebook reinstate my account if I prove it was hacked?
Meta publishes no separate rule for accounts suspended over a hacker’s activity, so your appeal goes through normal review. Clear dates, Meta’s own security emails and a secured account make your case consistent, but only Meta decides.
How long do I have to appeal?
Meta says 180 days, noting that the period varies by region, so use the deadline on your notice. If you miss it or the appeal fails, the account is permanently disabled with no further review.
What if Facebook disabled my account without suspending it first?
Meta says it may skip the suspension for severe or time-sensitive violations, and that it will tell you whether you can request another review.
Can I use facebook.com/hacked if my account is suspended?
Meta recommends it for hacked accounts, ideally on a device you’ve used before. Its pages don’t explain how it interacts with a suspension, so use it to regain your login; the appeal prompt appears after you log in.
Final Checklist
- Secure your email and look for Meta’s security messages.
- Confirm the notice came from an official Meta domain.
- Write a dated timeline and save screenshots.
- Submit one factual appeal before the deadline.
- After reinstatement, run the cleanup in Step 4.
Still disabled after a hack? Open your recovery case with AccRevert: a flat $299 case-preparation fee starts the work, and the success fee ($599 personal, $999 business, $1,199 Business Manager or ad account) applies only if access is restored.
Related Articles
Stop guessing and document the case properly.
Our team can review the account history, available ownership evidence and the recovery steps already attempted.
Facebook Decision Is Final? What You Can Still Do
Hacker Ran Ads on My Facebook Account? How to Stop the Charges
