April 2026 — recovery report

This is the April 2026 recovery report — what we saw across cases this month, what changed in Meta's platforms, and what we're watching going into May.

Volume snapshot

• Cases reviewed: 87 (vs 73 in March, +19%)
• Cases accepted: 71 (acceptance rate 82%)
• Cases recovered: 67 (recovery rate of accepted: 94%)
• Average resolution: 9 days (slightly above our trailing average of 8)
• Refunds issued: 4 (failed-recovery refunds, full)

What changed this month

Coordinated mass-reporting up 18%

April saw a clear uptick in cases where the trigger was coordinated reporting from third-party groups, not policy violations. A few patterns:

• Targeting was heavier toward small-creator accounts in the 10k–100k follower range.
• Reports tended to cluster within a 24-hour window followed by an immediate disable.
• Two cases involved competitor-business reporting; both resolved successfully with business-account appeal documentation.

If you're a creator in this follower band and you don't have your photo ID and original signup email handy, that's the gap to close before something happens.

Instagram disabled-account review times improved

Median Instagram appeal-to-decision time dropped from 14 days (March) to 11 days (April). We don't have visibility into the cause — could be expanded reviewer capacity, could be a process change. Either way, faster resolution is a net positive.

New phishing pattern: verified-business "policy review"

A fresh phishing pattern emerged in April targeting business accounts with verified-business status. The email format:

"Your verified business status is under review. To maintain your verification, please confirm your business details within 48 hours."

The link goes to a fake Business Manager login. Two of our customers this month had been on the receiving end of this before coming to us. If you have a verified business account, treat any email about "verification review" as suspect — Meta does not run verification-review notices this way.

What we recommend this month

1. Photo ID readiness. If yours isn't current (e.g. expired license), renew. ID quality is a major recovery bottleneck.
2. Business document folder. For business accounts, build the recovery checklist folder now, not later.
3. Watch for the verification-review phishing. Forward suspicious emails to phish@instagram.com or your business security contact.

Cases by platform (April)

• Instagram: 64%
• Facebook: 36%

Slightly more Instagram-heavy than our trailing distribution (62/38). Likely tied to the mass-reporting wave hitting Instagram creators.

Cases by type (April)

• Disabled (community guidelines): 31%
• Hacked / takeover: 28%
• Business / Page / Ad account: 22%
• 2FA lockout: 8%
• Mass-report driven: 7%
• Other: 4%

The "mass-report driven" category — which we track separately from standard disables when there's evidence of coordinated reporting — was up notably from March.

Looking ahead

Going into May, we're watching for:

• Continued mass-reporting volume; if it persists we'll publish a dedicated guide on what to do before it happens.
• Phishing evolution — particularly any expansion of the verified-business pattern.
• Meta's anticipated Q2 changes to the business-appeal interface.

If you're seeing patterns in your own work that match or differ from these, we'd love to know. Drop us an email at hello@shilder.com — these monthly reports get more useful with cross-signal.