Legal information notice: this article provides general information and isn't a substitute for advice from a qualified lawyer.
A hacked personal Instagram account is disruptive; a hacked business account is a direct hit to your income, customer trust, and often connected ad accounts and payment methods too. Business accounts carry extra recovery considerations beyond the standard personal-account process — here’s what to do.
Try Instagram’s password reset, or the “Get more help” then “My account was hacked” flow if your linked email/phone was also changed — the process starts the same as for a personal account.
Log into Meta Ads Manager (or ask your payment provider) to check for any unauthorized ad campaigns or charges — dispute anything unfamiliar with your bank or card provider right away.
Once you regain any access, review every person with admin or editor access to your Page and Instagram account, removing anyone unfamiliar and resetting your own credentials.
Use Meta’s dedicated Business Help Center to report the compromised business account — this channel is separate from standard personal-account support and better suited to business-specific issues.
If customers may have received scam messages or seen altered content during the compromise, post a clarification on your website or other verified channels once you regain control.
Check your linked ad account balance and any active campaigns before anything else once you’re back in — unauthorized ad spend during a business account compromise can run up significant charges very quickly, and disputing them with your card provider or payment method has its own time-sensitive window.
| Personal Account | Business Account |
|---|---|
| Recovery is a single-user process | Requires reviewing every admin/team member's access afterward |
| No connected ad spend to check | Must immediately check for unauthorized ad campaigns and charges |
| Standard Instagram Help Center support | Also use Meta Business Suite's dedicated business support channel |
No. Instagram and Meta Business Suite’s official recovery process is free — any unauthorized ad charges should be disputed with your payment provider, not paid.
Yes, for the recovery process itself. A lawyer becomes relevant if the compromise caused significant business/financial harm and you need to pursue formal recovery or dispute resolution.
Need professional legal help with this?
Find a Lawyer on VidyodayFor the standard personal-account version of this process, see our guide on Instagram account hacked. If the account is being impersonated by a separate fake profile rather than actually compromised, see our guide on fake profile impersonation.
Yes — if a linked payment method is active, unauthorized ad campaigns can accumulate significant charges rapidly, which is why checking this first is so important.
It depends on your bank/card provider’s dispute process and how quickly you report it — treat it the same as any other unauthorized transaction dispute.
Log into Meta Business Suite’s settings and review the People/Partners section, which lists everyone with access and their specific permission level.
Yes — it’s a separate channel specifically for business account and Meta Business Suite issues, generally better equipped to handle business-specific compromise cases.
Yes, through a verified alternate channel like your website or email list, once you’ve regained control — this helps limit further harm from the compromise.
Review its admin access and settings the same way as your Instagram account, since they’re often linked through the same Meta Business Suite.
Enable two-factor authentication, regularly review admin access, and use unique, strong passwords for every team member with account access.
This article is for general information only and does not constitute legal advice. Meta’s business tools and recovery processes can change — verify current guidance on Meta’s official Business Help Center before relying on this for a real situation.
