Account takeover recovery
Hacked Facebook, Instagram or WhatsApp Business account? Get it back
When a hijacker takes your business page or number, customers keep messaging it and some of them pay the wrong person. We help you take it back through the platform's official recovery channels, then lock it down so it does not happen again.
Your own accounts and business assets only. You will need to show the account is yours, and the platform makes the final decision, so recovery is never guaranteed.
How it works
Five steps, in this order
- 01
Triage
A short call to understand what was lost, when you last had access, and what you still control: the email address, the phone number, another admin.
- 02
Secure what is left
Before anything else we lock down the email account and phone number linked to the account, because a hijacker who still has those can take it again.
- 03
Official recovery
We take you through the platform's own recovery and verification flows, help you assemble proof of ownership, and follow up through the official support channels available to your account.
- 04
Lock it down
Once you are back in: two factor authentication with an authenticator app, a review of every admin, partner and connected app, old sessions signed out, and a WhatsApp two step PIN set.
- 05
Clean up
We check for posts, messages, ads or payment methods the hijacker added, and leave you a short written note of what happened and what changed.
What to prepare
Proof that the account is yours
Recovery succeeds or fails on evidence. Gather what you can before the triage call. Missing an item is not the end, but the more you have, the stronger the case.
- The name, link or phone number of the account you lost.
- Every email address and phone number that was ever on the account.
- A government ID in the same name as the profile that owns or admins the business page, if the platform asks for one.
- Business documents in the business name, such as a registration certificate or a utility bill, in case the platform asks for them.
- Screenshots of any security emails or texts you received, such as a notice that the email or password was changed.
- Roughly when you last had access and when you noticed something was wrong.
- Receipts or invoices for any ads you ran from the account.
Questions
Before you get in touch
- Can you guarantee I will get my account back?
- No, and nobody honestly can. Facebook, Instagram and WhatsApp decide every recovery themselves. What we do is make sure the strongest possible case goes through the right official channels, and we tell you plainly if the evidence is thin.
- Can you recover an account that is not mine, or get into someone else's account?
- No. We only work on accounts and business assets you own or are authorised to manage, and we ask for proof of ownership before we start. We do not break into accounts, and we do not work against anyone else's.
- How long does recovery take?
- It depends on the platform and on the evidence you have. Some accounts come back the same day through the automated recovery flow. Others need a manual review by the platform that can take days or longer. We give you an honest read after the triage call.
- What does it cost?
- It is quoted after the triage call, once we know which platform is involved, what you still control and how much clean up is needed. You get the figure before any work starts.
- What should I do right now, before I contact you?
- Change the password on the email account linked to the lost account and turn on two factor authentication for it. Tell your customers, from another channel, not to pay or send details to the hijacked account. Then use the platform's own hacked account help page to report it.
Next step
Tell us which account you lost and what you still control.
Recovery is one of our security services. If your website was hit as well, read what to do in the first hour after a website hack.