Take back control
New password and two-factor authentication.
Online security · 2026 edition
Hacked social media account: what to do right now?
A hacked business account means customers receiving fraudulent messages and a damaged reputation. Acting fast limits the damage. Here are the steps in the right order, and the official channels to use.
- First steps
- Recovery
- Reporting
Updated October 2026Rules checkedNo jargon
The answer in 30 seconds
In short
If you still have access to the account, change the password, turn on two-factor authentication and log out of all devices. If you no longer have access, first secure your email address, then start the platform's official recovery process. Warn your contacts, keep screenshots and get advice from your national cybersecurity help service. In the event of fraud or identity theft, report it to the police.
Secure your email
It is often where it all started.
Warn your contacts
So they do not click on fake messages.
Report it to the platform and the police
Evidence first, then the formal steps.
The steps in the right order
Don't panic, and never pay someone who promises to recover your account for money: it is often a second scam.
Who to contact and why
Public services can point you in the right direction free of charge. Keep all your evidence before contacting them. Names and websites vary from country to country.
| Situation | Who to contact | Where |
|---|---|---|
| You don't know what to do | Diagnosis and advice | Your national cybersecurity help service |
| You need technical help | Referral to a professional | Your national cybersecurity agency or a qualified IT professional |
| Online fraud, money lost | Report online or at a police station | The police, through their online reporting service or at a station |
| Illegal content posted | Report it | The platform's reporting tool and your country's official reporting service |
| Customer data exposed | Breach notification | Your data protection authority, within 72 hours |
Unauthorised access to an account and online identity theft are criminal offences in many countries. Ask the police or a lawyer about the rules in your country.
Stop it happening again
Most hacks start with a fake message or a reused password. A few habits greatly reduce the risk.
One password per account
A password manager means you don't have to remember them or reuse them.
Two-factor authentication everywhere
On your email, social media, bank and website. It is the most effective protection.
Be wary of urgent messages
A message threatening to close your account or claiming a copyright violation is often a trap.
Individual access
If an employee or contractor manages the account, give them access in their own name, which you can remove.
Stop depending on a single account
Your customer contacts, content and messages are backed up on your side, automatically. A hack no longer cuts you off from your customers.
Content backup
Your posts and visuals copied somewhere safe.
A customer list you own
Your contacts gathered outside the platform.
Login alert
You are warned of any unusual activity.
Crisis message ready
A template to warn your customers in one minute.
Your questions, our answers
What should I do if my social media account is hacked?
Secure your email, change the password, turn on two-factor authentication and log out unknown devices. If you no longer have access, start the platform's official recovery process.
How do I recover a hacked account if the password and email have been changed?
Use the recovery process provided by the platform, which often asks you to verify your identity. Only go through its official website or app.
Should I report a hacked account to the police?
It is advisable if you are the victim of fraud, identity theft or financial loss. Keep dated screenshots, the messages you received and the addresses used.
Who can help me for free after a hack?
Many countries have a free public service that offers cyber incident victims a diagnosis and advice, and can refer you to a professional if needed. Look for your national cybersecurity agency or the police online reporting service.
Do I need to notify the data protection authority if my business account is hacked?
If customers' personal data may have been exposed, notifying your data protection authority within 72 hours is in principle mandatory under the GDPR. Have your case checked by a professional.
Can you pay someone to recover your account?
Be careful: paid recovery offers received by message are very often scams. Stick to the official procedures.
Sources: GDPR, Article 33 (personal data breach notification) · guidance from your national cybersecurity agency, your data protection authority and the police.
General information, up to date as of October 2026. It does not replace advice from a professional.
Website creation
No website yet? Your business page from €39.90.
A clear, mobile-friendly page, built to be found and to turn your visitors into clients. The site is in your name: you pay once, it's yours.
- Mobile-friendly
- WhatsApp button
- In your name
Free quote
What if we automated all this for you?
Tell us about your project. We study it in detail, then you receive a personalised study and a clear quote in writing, within 24 business hours. No meeting, no obligation.
What happens after your request
Or by email: contact@growthsystemexperts.com