My Facebook account was hacked, how do I get it back?
Last reviewed: 2026-08-01 · Checked with Hunch’s on-device engine, the same one inside the extension. How Hunch checks →
Part of our guide: What to do if you got scammed →
You can almost always recover it, and the faster you start the better. What let the attacker in was a fake "unusual login" message pointing at a lookalike host like facebook-verify-login.example, not facebook.com. Go straight to Facebook's official recovery page, reset your password, and sign out every device you don't recognize before they lock you out further.
Got a message like this? Paste it here →
This hits anyone with a Facebook login, but especially page admins, small-business owners, and people who reuse one password everywhere. It works because a takeover feels like an emergency, and the fake "unusual login" alert borrows Facebook's own tone to rush you onto a lookalike site before you think to check the domain.
Illustrative example of the pattern, not a real message someone received.
How to verify it yourself
- Check where the login alert actually came from, Facebook writes from facebook.com, never from a host like facebook-verify-login.example.
- Open facebook.com/hacked directly by typing it yourself, not by tapping a link in any message.
- Look at Settings > Security > Where you're logged in for sessions and devices you don't recognize.
- Check whether your recovery email or phone number was quietly changed. That's the attacker locking you out.
Common questions
How did they get into my Facebook?
Most takeovers start with a phishing message like the fake "unusual login" above that sent you to a lookalike site where you typed your password. The attacker didn't break Facebook's security, they borrowed your login.
Will I lose all my photos and messages?
Usually not. Once you recover the account through facebook.com/hacked your content is still there; the priority is regaining control before the attacker deletes or misuses anything.
Should I make a new account instead?
Try recovery first, Facebook's hacked flow is designed exactly for this and often restores access within minutes to days. A new account abandons your history and contacts.
How do I stop it happening again?
Turn on two-factor authentication, use a unique password, and treat every "verify or lose your account" message as suspect. Real login checks never live on a .top address.
If you already responded
- Go to facebook.com/hacked (type it yourself) and follow Facebook's official Recover-hacked-account steps.
- Reset your password to something new and unique, and sign out of all other sessions.
- In Settings > Security, remove every unrecognized device and restore your real recovery email and phone.
- Turn on two-factor authentication so a stolen password alone can't get back in.
- Remember: no legitimate recovery service cold-calls you or charges a fee, anyone promising to "restore your account" for money is a second scam.
If you were already hit, expect a follow-up
One more thing to expect: after a scam, your details often land on lists that get reused, so you may be contacted again, sometimes by people posing as investigators, your bank's "fraud team," or "recovery agents" who promise to get your money back for an upfront fee. That follow-up is a second scam. No legitimate service charges a fee to recover funds.
Source: Facebook, Recover hacked account
Hunch is not affiliated with Facebook. Facebook is named only to describe a scam that impersonates it; the real Facebook does not send these messages.