Instagram Disabled After a Hack? How to Get Your Account Back

Finding your Instagram disabled after a hack feels doubly unfair: someone stole your account, used it to push crypto pitches or fake giveaways, and then Instagram shut it down as if you had done it. You can still ask for a review. Secure your email, gather proof of the takeover, then appeal through Instagram’s official flow.

If no hack was involved, read Instagram disabled or banned for no reason. If you were hacked but the account is still active, see how to recover a hacked Instagram account.

Why Instagram Disables Accounts That Were Hacked

Enforcement looks at the account, not the person typing. When an attacker posts scam links or spams followers, your account is the one breaking the Community Standards. Meta’s Transparency Center says repeated violations lead to a disabled account, some severe ones after a single occurrence, and that the login screen tells you whether another review is possible.

Suspended, Disabled or Locked: Read Your Screen First

Instagram publishes no fixed appeal window for disabled accounts. For Facebook suspensions, Meta gives 180 days, varying by region. If your notice shows a countdown, that is your deadline.

How to Appeal When a Hacker Caused the Violations

Step 1: Secure your email first

Instagram warns that whoever can read your email can probably get into your Instagram too. Change the password on each email account you use, make every password different, and recover a lost inbox before you appeal. Instagram asks for a secure email that only you can access.

Step 2: Collect proof that it was a hack

• Security emails from security@mail.instagram.com about a changed email, plus resets or codes you didn’t request.
• Login alerts, which Meta sends for sign-ins from an unrecognized device or browser.
• Screenshots of the scam posts, DMs and stories, and of followers warning you.
• The disabled notice, with the date you first saw it.
• Ownership details: your sign-up email or phone and the device type you used, which Instagram may ask about.

Keep old security emails. The in-app Recent emails list covers only the last 14 days.

Step 3: Submit the appeal

1. Log in on the app or instagram.com. If the disabled notice appears, follow its instructions to request a review.
2. If your login details no longer work, go to instagram.com/hacked, which first asks for your username, email or phone to find the account.
3. Enter the secure email from Step 1 as your contact address.
4. Complete any identity check, such as a video selfie.
5. Submit once, then watch that inbox.

Keep any text short and factual, for example:

My account was taken over on [date]. I got an email from security@mail.instagram.com about an email change I did not make. The crypto and giveaway posts after that date were published by the attacker. My email is now secured and I can verify my identity with a video selfie.

Meta says its in-app support assistant can help submit appeals and that only you can start those chats, so any “Meta support” account that messages you first is a scam.

Video selfie tips

For accounts with photos of you, Instagram may ask for a video selfie of you turning your head. Meta compares it with the photos on your profiles, so keep your face clearly visible. If it fails, you may be able to resubmit, and Instagram says the video is deleted within 30 days. See how to pass Instagram selfie verification.

If the Hacker Changed Your Email, Phone or Linked Accounts

• Email changed. Instagram emails your original address from security@mail.instagram.com with a link to reverse the change. See Instagram hacked with the email and password changed.
• Phone changed too. Request a login link or code. If nothing works, Instagram says you may be able to request support from a mobile device.
• Hacker’s account linked. Instagram says to remove unknown accounts in Accounts Center. Follow how to remove a hacker from Accounts Center.
• Unknown business manager. On a professional account, Instagram says switching to personal removes unauthorized managers, and insights are kept for 90 days.

After Reinstatement: Clean Up in One Sitting

1. Change your password, which logs out every other device.
2. Check Where you’re logged in under Password and security.
3. Review Account history in Your activity for changed settings.
4. Delete what the attacker left: posts, stories, bio links and DMs.
5. Check Account Status for removed content and features you can’t use.
6. Remove unknown apps under Website permissions, then Apps and websites.
7. Turn on two-factor authentication with an authentication app, as Instagram recommends, and save your backup codes.
8. Confirm the email, phone and linked accounts in Accounts Center are yours.

Instagram may limit security settings for a few days on an unrecognized device, so use your usual phone.

Common Mistakes to Avoid

• Opening a new account. Meta says accounts created to evade its restrictions may be disabled.
• Paying “unban” sellers. Learn how to spot fake account recovery services.
• Trusting ban threats. Instagram says phishing messages often threaten bans, and it never contacts you about security by DM.
• Appealing before your email is secure.
• Sharing your password or codes, including with apps promising likes or followers.

When to Get Professional Help

If the review was declined, the selfie keeps failing or the attacker replaced every contact detail, a documented case can help. The AccRevert team reviews the case, organizes your ownership evidence and a timeline of the takeover, and prepares a documented appeal submitted through Meta’s official channels. Only Meta decides the outcome, so no result is promised, and we never ask for your password or login codes.

Pricing: a flat $299 case-preparation fee opens a case; a success fee of $599 for personal accounts, $999 for business accounts or $1,199 for Business Manager and ad accounts applies only if access is restored. Payment is by PayPal only. See our Hacked Account Recovery service.

Frequently Asked Questions

Why did Instagram disable my account when the hacker broke the rules?

Enforcement applies to the account that broke the rules, and during a takeover that account is yours. Meta disables accounts after repeated violations or one severe violation. Your appeal must show the activity began when someone else got in, so dated security emails matter.

How long do I have to appeal a disabled Instagram account?

Instagram’s help center doesn’t state a fixed window for disabled accounts. For Facebook suspensions, Meta gives 180 days and notes that the period varies by region. Go by the notice on your own login screen, and appeal as early as you can while your evidence is fresh.

Can I prove it was a hack if the hacker changed my email?

Often, yes. When an email is changed, Instagram sends the original address a message from security@mail.instagram.com with a link to reverse it. That email, together with login alerts and a video selfie, helps show the account was taken from you, not handed over.

Should I make a new Instagram account while I wait?

Better not. Meta lists accounts created to evade its restrictions among those it may disable, which could add to your problems. A new profile also won’t bring back your followers or content. Wait for the review and keep your evidence in one place.

Will the scam posts still count against me after I get the account back?

Instagram doesn’t say whether violations posted by an attacker are cleared. Check Account Status right after reinstatement for removed content and features you can’t use, delete anything the attacker left, and keep two-factor authentication on so the same route in stays closed.

Final Checklist

• Every email account you use has a new, unique password.
• Security emails, login alerts and screenshots are saved with dates.
• One appeal went in with a secure email address.
• Unknown devices, apps and linked accounts are removed.
• Two-factor authentication is on, with backup codes stored offline.
• Scam posts are deleted.

Instagram still disabled after a hack? Open your recovery case with AccRevert: a flat $299 case-preparation fee starts the work, and the success fee ($599 personal, $999 business, $1,199 Business Manager or ad account) applies only if access is restored.

Related Articles

• Hacker Changed My Instagram Username? How to Get Your Handle Back
• How to Prove Ownership of a Social Media Account
• Social Media Account Hacked? What to Do in the First 60 Minutes