Your Instagram or WhatsApp account was hacked: recovery steps
Published by LegalBharat ·
How to get the account back, and what to do if the attacker has already asked your contacts for money.
Before anything else
File your complaint at cybercrime.gov.in. It is free, and you will need its acknowledgement number at every later stage.
In this order
- 1
Attempt a password reset first
Use the app's own Forgot Password flow to send a reset link to your registered email or number. If the attacker has changed those details, use the Need More Help option to verify your identity with a selfie or video.
- 2
Warn your contacts straight away
Use a different channel (a WhatsApp status, a group, or a friend's account) to tell people the account is compromised and that they should not send money. Most of the real financial damage happens here.
- 3
Secure everything the account is linked to
Change your email password, sign out of all active sessions, and turn on two-factor authentication. An email takeover usually comes before a social media takeover.
- 4
File a complaint if anyone was defrauded
If someone was tricked into sending money in your name, a formal complaint protects you from being treated as a participant later.
Avoid these
- Never trust pages or Telegram channels offering paid account recovery, because they re-victimise you
- Never log in through a link someone sends you; that is exactly how phishing works
Want an advocate on this?
Describe it once and verified advocates in your city take it from there.
Keep reading
This guide is general information, not legal advice. Every matter turns on its own facts, so speak to an advocate about yours.