It’s that sinking feeling in the pit of your stomach. You try to log in to see a photo from last weekend, but the password doesn’t work. You try again, slower this time. Still nothing. Then you see the email notification: "Your primary email address has been changed." Panic sets in. Facebook was hacked what do i do is probably the only thing screaming through your brain right now.
You aren't alone. Honestly, thousands of people deal with this every single day.
Cybercriminals aren't always looking for your embarrassing high school photos. They want your data, your ad account credits, or a way to scam your grandma out of five hundred bucks via Messenger. It’s invasive. It’s frustrating. But you can't just sit there. You have to move fast because the longer a hacker has the keys to your digital life, the more damage they do to your reputation and your wallet.
Stop the Bleeding Immediately
Speed is your best friend. If you still have access to your email account associated with Facebook, look for a message from security@facebookmail.com. This is the official line. Facebook sends an alert when your password or email is changed. Inside that email, there is a link that says "Secure your account" or "This wasn't me." Clicking that link can often bypass the hacker’s new password and let you revert the changes.
But what if they changed the email too?
Go to facebook.com/hacked. This is the "red phone" for account recovery. It’s a dedicated portal designed to walk you through the identity verification process. If you’ve been logged out of all devices, this tool is basically your only hope of getting back in without a lengthy manual review.
The Identity Verification Wall
Sometimes, the automated tools fail. It happens. If the hacker enabled Two-Factor Authentication (2FA) using their phone number, you’re stuck in a loop. You’ll likely need to upload a photo of your ID. I know, sending your driver’s license to a giant corporation feels sketchy when you've already been compromised, but it’s the standard protocol to prove you are who you say you are.
Facebook’s automated systems scan the ID to match your name and birthday. If your profile name is "Johnny Cool" but your ID says "John Smith," you might run into issues. Be patient. Sometimes you have to try the upload more than once. Use clear lighting. No glare.
Check Your Connected Apps
While you're fighting for your Facebook life, don't forget the side doors. Many of us use "Login with Facebook" for everything from Spotify to Airbnb. If a hacker is in your Facebook, they might be able to hop into those other accounts too.
Log into your primary email provider right now. Change that password first. If they have your email, they have everything. Use a passphrase—something long and weird like PurpleCowsEatGreenPizza77!—rather than a simple word.
Why Hackers Want Your Profile
It’s rarely personal. Most of the time, it’s about the "Meta Business Suite." If you have a credit card attached to your account for running ads, hackers will try to run thousands of dollars in "Likes" or "Lead Gen" ads for their own scam sites.
👉 See also: Using the iPhone X: What Most People Get Wrong in 2026
Other times, it’s a "trust" play.
They’ll message your friends saying you’re stuck in an airport or need help with a "recovery code" for their own account. Because the message comes from you, your friends are more likely to click. It’s a virus-like spread. If you can, get a friend to post on your wall or in a shared group: "Hey, [Name]’s account is compromised. Do not click any links or send money."
Cleaning Up the Mess After Recovery
Once you finally get back in—and it might take a few days of back-and-forth—the work isn't over. You need to do a deep scrub. Hackers often leave "backdoors" so they can get back in later.
Go to your Settings and look at "Where You’re Logged In." See a device in a country you’ve never visited? Log it out. Check your "Contact Info" again. Hackers often add a secondary email address that stays hidden so they can trigger a password reset later. Delete anything that isn't yours.
✨ Don't miss: Naked photos on Snapchat: Why the "Delete" Button is a Total Lie
Check your "Blocked" list too. Some clever hackers will block your close friends or family members so those people can't see the weird stuff the hacker is posting on your timeline. It’s a way to keep the scam going longer without being reported.
Preventing the Next Attack
I’m going to be blunt: if you aren't using an Authenticator App, you’re leaving your front door unlocked. SMS-based 2FA (getting a text code) is better than nothing, but "SIM swapping" is a real thing where hackers steal your phone number.
Download Google Authenticator or Duo. Link it to Facebook. This way, even if a hacker gets your password, they can't get in without the physical code on your phone. Also, stop taking those "Which Disney Princess are you?" quizzes. Many of them are just data-harvesting tools designed to grab your birthday or security question answers.
The Role of Meta Verified
Recently, Meta introduced a paid subscription called Meta Verified. While it’s controversial to pay for social media, it does offer one thing free users don't get: actual human support. If your account is tied to your business and you can't afford to be offline, the $15 a month might be worth it just for the direct line to a support agent. It shouldn't be that way, but in the current landscape, it’s a reality.
✨ Don't miss: Take Screenshots of Website: What Most People Get Wrong About Capturing Clean Data
Practical Steps to Take Right Now
- Check your email. Look for "Security" alerts from Facebook. Use the "Secure Account" link if it’s there.
- Visit the official portal. Use a device (laptop or phone) that you have previously used to log into Facebook. The system recognizes "known devices" and is more likely to trust you.
- Scan your computer. If you were hacked, there’s a chance you have a keylogger or malware. Run a scan with Malwarebytes or a similar tool.
- Notify your bank. If you have any payment methods saved in Facebook Pay or Ad Manager, call your bank and tell them to block any charges from Meta/Facebook.
- Change your email password. This is the most critical step. If your email is compromised, you will never truly secure your Facebook.
- Set up a Security Key. For high-profile accounts, buying a physical YubiKey is the gold standard of protection.
Getting your digital life back is a marathon, not a sprint. It’s incredibly stressful to feel like your identity has been hijacked, but by following the official recovery channels and securing your other accounts, you can usually regain control. Just don't wait. Every minute you spend wondering "Facebook was hacked what do i do" is another minute the intruder has to spread their reach.