What should I do if my business Instagram account gets hacked?

Hacks on small business accounts in Pakistan usually start the same way: a DM claiming a copyright violation, a fake "blue tick" offer, or a message from a friend's compromised account asking you to log in through a link. Once inside, the attacker changes the email and phone number, then uses your account to message your followers with fake giveaways or JazzCash payment requests. The faster you respond, the fewer customers are scammed in your name.

Start at the Instagram login screen with "Forgot password" and follow the recovery options; if the email was changed, Instagram usually sends a message to the original address with a link to reverse the change, so search your inbox for it. If that fails, use the account-recovery path that asks for identity verification, which for business accounts may include a video selfie. If the Instagram account is linked to a Facebook page or Meta Business Suite, an admin there may be able to help. Meanwhile, post on your Facebook page, WhatsApp status and any other channel that the account is compromised and that you will never ask for payment by DM.

Once you are back in, remove any unknown devices from the login activity, change the password to something you do not use elsewhere, and turn on two-factor authentication with an authenticator app rather than SMS where possible. Check which email and phone are on the account and that you, not a former employee, control them. When we manage an account we never need your password, because access is given through Meta Business Suite; that also means one fewer person holding a login that could leak.