By App World Team  |  Updated August 2026  |  Category: Facebook Security, Account Recovery

How to Report a Compromised Facebook Account in the Facebook App

If you have logged into Facebook and something feels wrong — a password that no longer works, messages you never sent, or posts and ads you never created — your account has likely been compromised. This guide walks you through exactly how to report a compromised Facebook account directly inside the Facebook app, using Meta's current official recovery flow, without paying anyone or calling a "support line," which is a common scam that targets hacked-account victims.

This article is based on the current, official Facebook and Meta Help Center recovery process. There is no legitimate customer service phone number for individual Facebook account recovery, and any website, forum comment, or search result telling you to call a number to "restore your hacked Facebook account instantly" is not affiliated with Meta. Keep that in mind as you read on, because it is one of the most important safety facts in this guide.

Table of Contents

• Signs Your Facebook Account Has Been Compromised
• Before You Report: What to Do First
• How to Report It in the Facebook App (Step by Step)
• What to Do If You Are Completely Locked Out
• Reporting a Hacked Facebook Page or Business Account
• Helping a Friend Recover a Hacked Account
• After You Report: Securing Your Account for Good
• How to Avoid Facebook Recovery Scams
• Frequently Asked Questions

Signs Your Facebook Account Has Been Compromised

Before you report an account as hacked, it helps to confirm that it is actually a compromise and not a simple login glitch or a forgotten password. Common warning signs include:

• You can no longer log in even though you are sure your password is correct.
• Your registered email address or phone number has been changed without your action.
• Friends tell you they received strange messages, links, or friend requests "from you."
• Posts, comments, or ads appear on your profile that you never created.
• You get notifications about a login from an unfamiliar device, browser, or location.
• Your name, profile photo, or bio has changed on its own.
• You notice unauthorized purchases or new ad campaigns billed to a payment method on your account.

If any of these apply to you, treat it as a real security incident and move straight to reporting and securing the account. Waiting even a few hours can give an attacker more time to message your contacts, run ads on your dime, or lock you out permanently by changing your recovery email and phone number.

Before You Report: What to Do First

If you can still log into the Facebook app, do these three things immediately, before or right alongside filing your report:

1. Change your password. Open the app, tap your profile photo in the top corner, go to Settings and privacy, then Settings. Open Accounts Center, tap Password and security, then Change password. Choose a new password you have never used anywhere else.
2. Check "Where you're logged in." In the same Password and security section, review the list of active sessions and devices. Log out of anything you do not recognize.
3. Review connected apps and websites. Still inside Accounts Center, look for apps or websites linked to your Facebook login. Malicious third-party apps are a very common way accounts get hijacked in the first place. Remove anything unfamiliar.

Doing this first can shut the attacker out before you even finish the report, which matters because a hacker who is still logged in can sometimes undo your changes if you move too slowly.

How to Report It in the Facebook App (Step by Step)

Here is the official path Meta provides inside the Facebook mobile app for reporting a compromised account when you can still access it, at least partially:

1. Open the Facebook app on your phone and tap your profile picture (or the menu icon) in the top right corner.
2. Scroll down and tap Settings and privacy, then tap Settings.
3. Tap Accounts Center near the top of the settings menu.
4. Select Password and security.
5. Scroll to the Login issues or Get help section and tap it.
6. Choose the option that best matches what happened, for example "If you think your account was hacked" or "My account is compromised."
7. Follow the on-screen prompts. Facebook will typically walk you through a security checkup that includes confirming your identity, reviewing recent login activity, and forcing a password reset.
8. Complete the identity verification step, which may involve a code sent to your phone or email, or confirming details only the real account owner would know.

You can also reach the same reporting flow directly through a browser, even from your phone, by visiting facebook.com/hacked. This page is the canonical, official entry point Meta uses for all compromised-account reports, and it works whether you access it from the Facebook app's built-in browser or any other browser. On that page you will typically be asked to:

• Select the option that matches your situation, such as "My account is compromised" or "Someone else is using my account without my permission."
• Enter your username, email address, or phone number to locate the account.
• Enter your last known password, or select "I no longer have access to these" if the attacker changed it.
• Follow the automated recovery wizard, which will reset your password and start a security review of the account.

Because Meta's interface changes periodically, the exact wording of menu items (for example, whether it says "Get help," "Login issues," or "Security checkup") can shift slightly between app versions. The underlying path, however, has stayed consistent: Settings and privacy → Settings → Accounts Center → Password and security → Get help / Login issues → report the account as compromised.

What to Do If You Are Completely Locked Out

Sometimes an attacker changes both your password and your recovery email or phone number, which locks you out before you can act. If that has happened to you:

1. Go to facebook.com/hacked on any device you have used to log in before, since Facebook uses device recognition as part of identity verification.
2. Select "I think someone else is using my account" or the closest equivalent option shown.
3. Enter your name, email, or phone number to help Facebook locate your profile.
4. When asked for your password, choose "I no longer have access to these" if the attacker changed it.
5. Complete the identity verification steps Facebook offers, which can include confirming trusted contacts, recognizing photos of friends, or in some cases submitting a government-issued photo ID for manual review.

If the automated tool is unable to verify you, do not create a duplicate account and try to "message support" through it — Meta does not offer live phone or chat support that bypasses this verification process. The ID verification path inside facebook.com/hacked is the legitimate escalation route, and manual reviews can take longer than automated resets, so be patient and check back rather than repeating the process multiple times, which can flag your report as spam.

Reporting a Hacked Facebook Page or Business Account

If what was compromised is a Facebook Page you manage, or a Business Manager / Meta Business Suite account rather than your personal profile, the recovery path is slightly different. Instead of the personal facebook.com/hacked flow, go to business.facebook.com/help and follow the prompts there. Business account recovery often asks you to prove ownership of the Page or ad account, for example through a linked business email domain, so make sure that information is accurate and up to date before an incident happens.

Helping a Friend Recover a Hacked Account

If a friend or family member tells you their Facebook account was hacked, the most useful thing you can do is point them to the same official flow rather than trying to log in or "fix it" on their behalf. Share the facebook.com/hacked link with them directly, and remind them that Facebook will never ask them to pay a fee, download software, or read out a one-time code to a stranger on the phone in order to recover an account. If their account is being used to send scam links to your shared friends list, report the specific messages or posts as spam or scam content using the in-app "Report" option on the post or message itself, in addition to telling your friend.

After You Report: Securing Your Account for Good

Filing the report is only half the job. Once you regain access, or while you are waiting for review, take these steps to reduce the chance it happens again:

• Turn on two-factor authentication (2FA). In Accounts Center, go to Password and security and enable Two-factor authentication. An authentication app is generally considered more secure than SMS codes, since SIM-swap attacks can intercept text messages.
• Set up alerts for unrecognized logins. Facebook can notify you by email or notification whenever a new device logs in, which gives you an early warning if it happens again.
• Add trusted contacts. Trusted contacts can help you regain access faster in a future lockout.
• Review and remove unfamiliar connected apps one more time, since a leftover malicious app is one of the most common ways accounts get re-compromised shortly after recovery.
• Delete unauthorized posts, messages, or ads the attacker created, and let close contacts know not to click any links sent while your account was compromised.
• Change your password on your linked email account too, especially if you suspect the attacker gained access to your Facebook password through a compromised or reused email password.
• Use a unique password for Facebook that you do not reuse on any other site. A password manager makes this easy to maintain long term.

How to Avoid Facebook Recovery Scams

Because "my Facebook account was hacked" is such a common and emotionally stressful search query, it has become a magnet for scammers. While researching this guide, we found a large volume of fake "Facebook support" phone numbers spread across forums, quote sites, and comment sections, all promising instant recovery if you call. None of these are legitimate. Keep the following in mind:

• Meta does not operate a public customer service phone number for personal account recovery. If a search result, comment, or ad gives you a number to call about a hacked Facebook account, treat it as a scam.
• Facebook will never ask you to pay money, buy gift cards, or install remote-access software to recover your account.
• Facebook will never ask you to send your password to a "support agent" over chat, email, or phone.
• The only official recovery destinations are the in-app path described above and the facebook.com/hacked web page. Bookmark the correct URL so you are not tempted to click a sponsored or spoofed link during a stressful moment.
• Be cautious of "recovery experts" on freelance or Q&A sites offering to fix your account for a fee. Genuine account recovery through Meta is free.

Frequently Asked Questions

Does Facebook have a phone number to report a hacked account?

No. There is no official Meta phone line for individual account recovery. All legitimate reporting and recovery happens inside the Facebook app or through facebook.com/hacked.

How do I report a compromised Facebook account in the app?

Open the app, tap your profile picture, go to Settings and privacy, then Settings, open Accounts Center, tap Password and security, then Get help or Login issues, and select the option describing your situation, such as "My account is compromised." Follow the verification prompts to submit the report.

What if the hacker changed my email and I cannot log in at all?

Go to facebook.com/hacked on a device you have used before, choose the option matching "someone else is using my account without permission," and complete the identity verification steps, which may include confirming a trusted contact or submitting a photo ID.

How long does it take Facebook to respond?

There is no officially published timeline. Automated resets through facebook.com/hacked are often resolved within minutes to a few hours, while manual ID reviews can take longer, sometimes several days, depending on report volume.

Can I recover a hacked Facebook Page separately from my personal account?

Yes. If a Page or Business Manager account is affected rather than your personal profile, use business.facebook.com/help, which has a dedicated recovery flow for Pages and ad accounts.

Final Thoughts

A compromised Facebook account is stressful, but the recovery path is straightforward once you know where to look: the Facebook app's Accounts Center, or the direct facebook.com/hacked page. Move quickly to change your password and review your active sessions, file the compromised-account report through the official in-app flow, and once you are back in, lock the account down with two-factor authentication and a fresh, unique password. Above all, be skeptical of any phone number, ad, or "support agent" that asks for payment or your login details — the real process never requires either.

This guide was compiled by the App World Team using Meta's current official Help Center guidance. Facebook's menus and wording change periodically, so if a specific label mentioned above has moved, look for the closest equivalent under Settings and privacy → Settings → Accounts Center → Password and security.