Your Facebook account was taken over: a recovery sequence

If a friend reports strange posts, your password stops working or your email changes, start with the real Facebook recovery flow. A stranger claiming to be Meta support in Messenger may be exploiting the same incident. Recovering the login is only the first stage; an attacker may have changed contact details or used Pages and payment methods.

Work in this order​

1. Type facebook.com/hacked yourself, preferably on a device and browser you previously used for Facebook. Follow its account identification and recovery prompts. If you still have access, change the password to a unique one immediately.
2. Secure the email account linked to Facebook. Check for unfamiliar sign-ins, changed recovery addresses and forwarding rules. Someone who controls that inbox may undo your Facebook recovery.
3. Once inside Facebook, review the account's email addresses, phone numbers, login activity and connected sessions. End sessions you do not recognize, then enable two-factor authentication and preserve your recovery method.
4. Review posts, direct messages, Pages, ad accounts and saved payment methods. Tell contacts not to trust recent requests for money or codes. Capture evidence and report unauthorized spending through the appropriate billing route.

If recovery stalls​

Use only the prompts on Facebook's own hacked-account help page. Access to the old email or phone affects which options appear. A verification delay can be a platform security measure; paying a third party cannot bypass it safely. If the takeover began after installing software, inspect that device before entering the new password on it. Our phishing recovery steps explain why securing the device and the inbox matters as much as resetting Facebook.