TakeBackMyAccount

Instagram Recovery Guide

Instagram Account Hacked and the Email Changed

Last updated: October 2026

Instagram hides its best recovery tool in your old inbox — and most victims never check it before spiraling into forums and fake recovery services. Here's the order that works: the revert link, the official hacked flow, the video selfie, and the Facebook door.

The short answer If a hacker changed your Instagram email, check your old inbox first: when the email on an Instagram account changes, Instagram emails the previous address a "Revert this change" link — it's the fastest way back, and it doesn't last forever. Trust only messages from @mail.instagram.com. If that link is gone or expired, go to instagram.com/hacked, choose "My account was hacked," and complete identity verification — for most people that's a video selfie matched against your account photos. If your Instagram is linked to your Facebook, "Log in with Facebook" can also restore access. Submit one request only; repeated requests from different devices look like bot activity and hurt your case.

Step 1: The email in your old inbox (check this before anything)

Instagram notifies the previous email address when an account's email is changed, and that notification carries a "Revert this change" / secure-account link. If you still control the old mailbox, this can put you back in control in minutes — no forms, no verification queue. Two cautions:

Step 2: Try the login link

In the app: login screen → "Forgot password?" → request a login link by email or SMS. Try every identifier you have — username, old email, phone number. If the hacker changed both email and phone, this will fail; that's expected, and it's what the next step exists for.

Step 3: instagram.com/hacked and the video selfie

  1. Go to instagram.com/hacked and select "My account was hacked."
  2. When asked for a support email, give a secure email address you control — it can be a brand-new one. This is where Instagram will reach you, so it must be an inbox the hacker can't read.
  3. Complete identity verification. The standard route is a video selfie: you record a short video turning your head, and Instagram matches it against photos on your account. It's a mobile flow — on iPhone or Android, use "Need more help?" / "Get help logging in" when you're asked for a code you can't receive, and it'll route you there.
  4. Wait for the outcome on your secure email. With email or phone access, recovery can take minutes; with full verification, expect hours to a few days.
Both email AND phone changed? This is your path — and your only one When the hacker has replaced every contact method, the video-selfie verification through instagram.com/hacked is the route designed for you. Your strongest assets: your face matching your account photos, the original signup email or phone (name them in the request even if you can't access them), and the original device type you used. Submit one request and wait — duplicates from multiple devices read as bot activity.

Step 4: The Facebook door (if you linked them)

If your Instagram and Facebook accounts were linked, "Log in with Facebook" can restore access. Secure the Facebook account first — change its password and enable two-factor — because entering through a compromised Facebook account just moves the problem.

The 30-day warning that actually applies here

Instagram's 30-day deadline is about deletion, not hacking: if the account gets deleted — by you in a panic, or by the hacker — you have roughly 30 days to log in and save it before it may be permanently gone. It's a second reason to move fast, and to never "just delete it and start over" in the first angry hour.

Step 5: Once you're back in

  1. Change the password — strong and unique.
  2. Enable two-factor authentication.
  3. Review login activity and end any session you don't recognize.
  4. Revoke third-party apps you don't know.
  5. Confirm the email and phone on the account are yours — both of them.
Every paid "Instagram recovery service" is a scam Instagram's process is free, and nobody outside Meta can reverse a hack for you. The people DMing you offering recovery for a fee are the same ecosystem that stole the account. The only legitimate doors are the ones on this page.

Questions people actually ask

The hacker changed my Instagram email and phone number. Can I still get my account back?

Yes — that's exactly the case instagram.com/hacked is built for. Give a secure email you control and complete the video-selfie identity check. It takes hours to a few days rather than minutes, but it's a real path.

How does the Instagram video selfie verification work?

You record a short video of your face turning in different directions, and Instagram compares it with photos already on your account. It runs on mobile, through the "Need more help?" / "Get help logging in" route when a code you can't receive is requested.

Instagram emailed me about an email change I didn't make. Is it real?

Check the sender: genuine mail comes from @mail.instagram.com. If it's real, use its "Revert this change" link immediately — it's the fastest recovery route there is.

How long does Instagram hacked-account recovery take?

Minutes if you still control the email or phone on file; hours to a few days when full identity verification is needed. Submit one request and wait — repeated requests can slow you down.

The honest bottom line Old inbox first — the revert link is the fastest door in all of account recovery. If it's gone, instagram.com/hacked plus a video selfie is the real path, even when both the email and phone were changed. One request, patience, and no paid "services," ever.

Related recovery guides

Not sure which step applies to you?

Take the free diagnostic — answer a few questions about what happened to your account and get a step-by-step recovery plan built for your exact situation. If your case needs the full playbook — the exact ticket wording, proof checklists, and follow-up scripts — that's what the Recovery Kit is for.

Start the free diagnostic