What to do after an Instagram account takeover

If an Instagram account was taken over, start with account recovery rather than trying to access it back. Use Instagram's official recovery flow at instagram.com/hacked and check the original email inbox for security messages that can reverse an email change. Once recovered, change the password, sign out unknown sessions, remove unfamiliar linked accounts/apps, and enable two-factor authentication.

Preserve evidence: save emails, usernames, dates, payment records, threatening messages, and relevant URLs. Do not send an attacker more personal information or pay someone who promises a guaranteed recovery. Be wary of “support” accounts asking for a code.

Contact local police or a national cybercrime/fraud reporting service when there are threats, extortion, identity theft, financial loss, or serious harassment. Whether a platform shares information with authorities depends on the facts and legal process; do not assume that reporting an account automatically creates a police case. If you are in immediate danger, contact emergency services.

Sources

• Instagram account recovery

• Australian Cyber Security Centre