Someone else is in your Facebook. Not for long.
Email switched. Password rejected. Strange posts you didn’t make. We file the appeal that puts your account back in your hands — and only get paid if it works.
Start at facebook.com/hacked, which routes you through Meta’s official hijack-recovery flow. If basic recovery fails, identity verification with photo ID is the path. Most cases resolve in 5–14 days when filed correctly. Email and password changes by the attacker make recovery harder but not impossible.
How you know you’ve been hacked
If your email account is also compromised, fix that first. Recovery emails for Facebook will be intercepted by the attacker otherwise, and you’ll keep losing the race.
How to take it back
Secure your email first
Change your email password, enable 2FA there, remove suspicious forwarding rules. This is non-negotiable before recovering Facebook.
Go to facebook.com/hacked
Meta’s official hacked-account flow. It walks you through identifying the account and the right recovery option for your situation.
Use a device the account previously trusted
Recovery from a familiar device + IP succeeds more often than from a new device. If you can, use the phone or browser the account previously logged in from.
Submit identity verification if basic recovery fails
Photo ID required, government-issued. Match the name on the account exactly. Reviewers reject mismatches silently.
After recovery: lock everything down
New password (long, unique), 2FA via authenticator, review login history, remove unfamiliar trusted contacts, revoke third-party app access.
Stuck? Let us take it from here.
Expert review is free. You only pay if we accept the case — and we refund if recovery fails.
We use official Meta, Instagram, and Facebook documentation as source material, then add operational context from anonymized Shilder case work.
Questions about this case.
Yes, through identity verification. Photo ID + a code-in-hand selfie + an email you currently control. The success rate is lower than email-based recovery but still meaningful for legitimate cases.
Page and ad-account access is recovered as part of the same case, assuming you were the original admin. If the attacker reassigned admin rights, that’s a separate but parallel appeal we handle in the same case.
No. Deletion makes recovery effectively impossible after the 30-day window, and you lose all history. Even severely compromised accounts are recoverable.
Ready to get your account back?
Submit your case in under three minutes. Expert review starts the same day.