Your Instagram or WhatsApp account was hacked: recovery steps
How to get the account back, and what to do if the attacker has already asked your contacts for money.
Before anything else
File your complaint on the government portal at cybercrime.gov.in — it is free, and the acknowledgement number it gives you is needed at every stage that follows.
- 1
Attempt a password reset first
Use the app's own Forgot Password flow to send a reset link to your registered email or number. If the attacker has changed those details, use the Need More Help option to verify your identity with a selfie or video.
- 2
Warn your contacts straight away
Use a different channel — a WhatsApp status, a group, or a friend's account — to tell people the account is compromised and that they should not send money. Most of the real financial damage happens here.
- 3
Secure everything the account is linked to
Change your email password, sign out of all active sessions, and turn on two-factor authentication. An email takeover usually comes before a social media takeover.
- 4
File a complaint if anyone was defrauded
If someone was tricked into sending money in your name, a formal complaint protects you from being treated as a participant later.
- Never trust pages or Telegram channels offering paid account recovery — they re-victimise you
- Never log in through a link someone sends you; that is exactly how phishing works
Want an advocate on this?
Describe it once; verified advocates in your city take it from there.
This guide is general information, not legal advice. Every matter turns on its own facts — speak to an advocate about yours.