Quick fix: 5 steps
- Search your old email inbox (and spam) for Facebook's email-change message, verify it, and click the link to reverse the change.
- No luck? Go to facebook.com/hacked from a device you have logged in with before.
- No access to email or phone: facebook.com/login/identify, then No longer have access to these? with a brand-new email.
- Once in: change the password, log out unknown devices in Where you're logged in, remove posts you did not make.
- Turn on two-factor authentication and warn friends. Full cleanup.
What it means when your Facebook email was changed
When a hacker takes over a Facebook account, one of the first things they do is change the email address (and often the phone number) tied to it. That is the move that locks you out: the password reset message now goes to the attacker, not to you. The good news is that Facebook built a specific safety net for this exact situation, and most people who act within hours get the account back without paying anyone.
Facebook's help center says that when an email address on your account is changed, Facebook sends a message to the previous email address with a special link. Clicking that link reverses the email change and secures your account. So the first thing to do is not to panic-click "Forgot password," but to look in the inbox of the old email address for a message from Facebook about the change.
How to confirm it was a takeover and not just a glitch
- You receive an email saying the email address or phone number on your account was changed, and you did not do it.
- Your password no longer works and the reset message does not arrive.
- Friends tell you that you messaged them about money, crypto, "a video of you" or a login code.
- Posts, comments or messages appear that you did not write, or your profile picture changed.
- You see logins from places or devices you do not recognize.
Facebook's help page for hacked accounts lists the same follow-ups: log out unrecognized devices, remove content you did not post, and secure the account. If you only got a scary email about a login but your account works fine, the situation is different and simpler: see the section on fake Facebook emails.
The official starting point
Facebook's recommended entry is facebook.com/hacked, ideally opened on a device you have used to log in to Facebook before (the same phone, laptop or browser). Familiar devices matter: Facebook says to use one where you have logged in previously. If your own email address was changed, there is a dedicated Facebook article titled "Recover your Facebook account if you can't access your account email address or mobile phone number" that this guide follows.
| Your situation | Best first move | Section |
|---|---|---|
| Email changed, you still have the old email inbox | Look for Facebook's message with the revert link | Revert the change |
| Email and phone both changed, no old inbox access | Recovery flow from a familiar device, new contact details | No access to email or phone |
| You can still log in, but things look wrong | Change password, log out other devices, review settings | Secure the account |
| Your Page or ad account is affected | Use the separate Page recovery path from the Help Center | Pages and ads |
| Fake account pretending to be you | Report the impersonation | Imposter accounts |
We keep a broader Facebook account hacked recovery guide and a service page. This article zooms in on the one case that blocks most people: the email address was changed.
The first 15 minutes
- Stay calm and use a familiar device. Facebook's help says to use a device where you have logged in before.
- Search your old email inbox (including Spam, Junk, Promotions and Trash) for a Facebook message about an email change. Check every address you may have used over the years.
- Click the reversal link in that message, only if you have confirmed the email really comes from Facebook (see the verification tips below).
- Go to facebook.com/hacked and follow the on-screen options.
- Warn a few friends by another channel (text, phone call) so they ignore requests coming from your account.
- Secure your email account first if it was reused with Facebook: if the attacker also owns the email, they can keep undoing your fixes.
The order matters because the attacker may be watching. If you reset the Facebook password but the same hacker still controls your email, they can simply reset it again. That is why securing the mailbox comes first whenever the Facebook email was changed. Our guide on recovering a hacked email account helps with that part.
Step 1: Revert the email change with Facebook's special link
Facebook says it sends a message to the previous email address when an email on the account changes, with a special link you can click to reverse the change and secure the account. Practical advice for using it:
- Act quickly. Facebook's help page does not state how long the link works, so do not assume it stays valid. Check your inbox as soon as you read this.
- Look at every old address. If you changed your Facebook email years ago, the message may have gone to a forgotten address, such as an old school or Hotmail account.
- Check spam and trash. Automatic filters sometimes hide these notices.
- Verify the message. Phishers also send "security" emails that imitate Facebook. Facebook's help center has an article on how to confirm that an email is genuinely from Facebook, and says to check before clicking links. If you are unsure, do not click: go to facebook.com/hacked by typing the address instead.
After using the link, you should be taken through steps to secure the account. Follow every prompt, then continue with the cleanup in Step 3.
Step 2: No access to your email or phone? Use Facebook's recovery flow
If the attacker changed both the email and the phone number, or you no longer control the old inbox, use Facebook's recovery option designed for this: "Recover your Facebook account if you can't access your account email address or mobile phone number." Based on Facebook's help pages:
- On a device where you have logged in before, open your usual browser and go to facebook.com/login/identify.
- Search for your account using an email address or phone number that was once on it, or your username. Facebook's help says to try other emails and numbers you might have forgotten were connected.
- When you find the account, look for No longer have access to these? If that wording does not appear, you may see Forgot account? or Recover instead.
- Facebook may ask you for new contact information, which must not have been used for your Facebook account before. Use an email address you fully control.
- Follow the prompts to confirm that the account you are trying to recover is yours.
Facebook's help center also suggests contacting your email provider if the root problem is a lost email account. What the confirmation prompts ask depends on your account and device, and Facebook's pages we reviewed do not list every method. Some people are asked to confirm identity with a photo or ID, but we could not verify the exact current method on Facebook's own page, so be wary of any website that claims a guaranteed process.
Tips that increase the chance of success
- Use the same phone, laptop and browser you have used for Facebook before, on the same Wi-Fi network if possible.
- Do not create many repeated requests. Several quick attempts from different devices can look suspicious.
- Use a brand-new email address for the recovery, one that has never been on Facebook, with a unique password and 2-step sign-in.
- Keep the original name and profile details consistent when asked.
- Be patient. Some steps may take time, and Facebook's pages we reviewed do not give a fixed timeline.
Friends can help, in a limited way
Ask a friend to search for your real profile and report it as compromised, and warn your network. Do not give a friend your login details, and never share codes sent to you. Scammers who impersonate "Facebook support" often ask for exactly that.
Step 3: Secure the account once you are back in
Facebook's hacked-account page lists the cleanup steps. Here they are, with practical detail:
Log out devices you do not recognize
Go to Settings and open the Where you're logged in section. Select any device or location you do not recognize and log it out. Facebook's menus have changed names several times over the years (Settings, Accounts Center, Password and security), so if the exact label differs on your screen, search for "where you're logged in" in the Settings search box.
Change your password
Pick a new one you have never used. Do not reuse the password from your email. A password manager keeps this simple: see our password manager guide.
Check the contact information
Confirm that the email addresses and phone numbers listed on the account are yours, remove the attacker's, and keep at least two ways to recover. Facebook says to keep contact information current so it can help you if something goes wrong.
Turn on two-factor authentication
Turn on two-factor authentication in the account's security settings. We could not confirm Facebook's current exact menu path from the pages we opened, so look for the security and login (or password and security) section in your settings. An authenticator app is more resilient than a text message. See our two-factor authentication guide.
Remove content you did not post
Facebook's help says to look for posts, comments or messages you did not write, and a changed profile picture. Delete them, and check for new friends, new groups, changed names and new linked apps. Review recent Messenger conversations too: that is where scammers asked your friends for money.
Review connected apps and logins
Remove apps and websites you no longer use or do not recognize. If you logged into other sites with Facebook, change those passwords, and check the permissions they hold.
If your Facebook Page or ads were affected
Facebook's help center lists separate help for recovering a hacked Page that you manage, which is different from recovering a personal profile. If you run a business Page or ads and your personal profile was hacked, the Page may be at risk because it is connected to your profile. Check the following:
- Who is an admin? Look for admins or roles you did not assign and remove them.
- Ad accounts and payment methods. Look for ad campaigns you did not create and cards you do not recognize. Contact your bank if you see charges.
- Posts and messages. Remove spam posts and scam messages sent from the Page.
- Business tools. Review connected business accounts and apps.
The exact steps for Pages are on Facebook's separate help article, which the hacked-accounts page links to. Do not rely on third-party "Page recovery experts" who ask for payment up front. If you run Facebook ads for your business in Canada, our social media services page shows how we can help set things up safely.
If someone made a fake account in your name
This is a different problem from a hacked account. Facebook's hacked-accounts help page links to a separate article for imposter accounts: you report the fake profile, and your real account stays under your control. Ask friends to report it as well, and post a warning on your real profile so people do not accept a second friend request from "you."
Fake Facebook emails and the "your account will be disabled" trick
Many hacks start with a message that looks like Facebook: "You violated community standards," "Your Page will be deleted in 24 hours," "Someone tried to log in." The link goes to a fake login page that records your password and the code you type. Facebook says to check whether an email is genuine before clicking links in it.
- Do not click, go directly. Type the address or open the app and look for notifications there.
- Look at the sender and the link. Hover over the link to see where it truly leads.
- Urgency is a warning sign. Real services rarely threaten deletion within hours.
- Never give out a code. A login code is for you only. If someone asks you to send it, it is a scam.
- Remember the email-change notice is different. The genuine one arrives after a real change, with a link to reverse it. If you did not expect a change, treat it as a possible emergency and verify it by going to facebook.com/hacked yourself.
Learn more in our phishing guide and how to spot AI-generated phishing emails.
How accounts end up with a changed email
| Cause | What happened | Prevention |
|---|---|---|
| Phishing | You typed your login on a fake page | Never log in through email links, use two-factor authentication |
| Reused password | A leak elsewhere exposed your password | Unique passwords, password manager |
| Hijacked email | The attacker owned your email and used it to reset Facebook | Secure the email first, keep it protected with strong sign-in |
| Code scam by a friend's hacked account | You were asked to send a code "to prove you are real" | Never share codes, call the friend |
| Malware or a malicious browser extension | Saved sessions or passwords stolen | Scan the device, remove unknown extensions |
Realistic scenarios
Realistic scenario (illustrative, invented details).
Scenario 1: The old inbox saves the day
Karim sees he is logged out and the password fails. He checks his old Hotmail address, which he forgot was ever linked to Facebook, and finds a message about an email change. He verifies that it genuinely comes from Facebook, clicks the link, and takes back control within 30 minutes. He then changes his password, logs out unknown devices and enables two-factor authentication.
Scenario 2: Both email and phone changed
Isabelle's account is gone: the attacker replaced both email and phone. She uses her usual laptop, goes to facebook.com/login/identify, tries her old email, and selects "No longer have access to these?" She supplies a fresh email address she created for the purpose and follows the confirmation prompts. It takes several rounds over a couple of days. Meanwhile she warns her contacts by text and secures her main email.
Scenario 3: A small business Page
A restaurant owner in Quebec loses her profile and sees her Page publishing crypto ads. Once she recovers the profile, she removes unknown admins, checks the ad account for charges (she disputes two with her card issuer) and uses Facebook's separate help for hacked Pages. She stores the logins in a password manager and turns on two-factor authentication for every admin.
Mistakes that make recovery harder
- Paying a "recovery expert." Facebook's own flows are free. Paid services reached through ads, comments or direct messages are often scams.
- Submitting recovery from a new device or network over and over. Use the device you have used before.
- Using a recovery email that the attacker can read. Create a new address and secure it first.
- Ignoring the old inbox. The reversal link goes to the previous address, and that is easy to forget.
- Clicking links in lookalike "Facebook support" emails. Verify genuine mail first, as Facebook's help advises.
- Sharing a login code. A code lets someone else in. Never read it out or type it into a page you reached from a message.
- Fixing Facebook but not the email. If the email stays compromised, the attacker can repeat the takeover.
What about Messenger, Instagram and other Meta apps?
Messenger is tied to your Facebook login, so a hijacked Facebook account usually means exposed conversations. Instagram and other apps may be connected through the same account settings. After recovering Facebook, look through each connected app, change its password if it has its own, and check recent logins. Meta's account tools have been reorganized several times, so the labels for these settings may differ from what you saw in older tutorials. If you use the Facebook login for other websites, those sites might also be exposed: change those passwords and review the permissions they hold.
If you suspect the hacker read private messages containing documents, health information or financial details, treat it as potential identity theft and monitor your credit with Equifax Canada and TransUnion Canada.
Keep a record
Write down dates, emails received (take screenshots of the email-change notice with its sender), the steps you took and the outcomes. If you later need to dispute a charge or file a police report, this timeline helps. Do not forward the notice to unknown addresses: keep it for yourself.
Facebook hacked: recovery checklist
Copy this and tick as you go
- ☐ Used a device I have logged in with before
- ☐ Checked old email inboxes (spam and trash too) for Facebook's email-change message
- ☐ Verified the message is genuine before clicking the reversal link
- ☐ Visited facebook.com/hacked and followed the options
- ☐ If no access: tried facebook.com/login/identify and No longer have access to these?
- ☐ Used a new, never-used email address for recovery
- ☐ Secured my email account first
- ☐ Changed the Facebook password to a unique one
- ☐ Logged out unrecognized devices in Where you're logged in
- ☐ Removed posts, messages, friends and apps I did not add
- ☐ Turned on two-factor authentication
- ☐ Warned friends by text or phone
- ☐ Checked Pages, ad accounts and payment methods
After you recover: protect your money and identity
Most Facebook hacks are about money. Attackers message your friends asking for e-transfers, gift cards or crypto, or they run ads on your card. Take these steps after recovery:
- Review your bank and card statements for the last few weeks, and call your card issuer about any charges you do not recognize.
- Warn contacts that messages during the hack were not from you. Ask anyone who sent money to contact their bank.
- Report the scam. In Canada, the Canadian Anti-Fraud Centre takes fraud reports, and your local police can add one for the record.
- Check other accounts linked to your Facebook login (Instagram, Messenger, apps where you chose Log in with Facebook). If your Instagram is also affected, see our Instagram hacked recovery guide.
- If ID or sensitive information was in your messages, read our identity theft recovery guide.
Rebuilding trust
Post a short note on your profile once you are back, explaining that the account was compromised, that any money requests were fake, and that your friends should report suspicious messages. Delete bad posts, and remove or block strange new friend requests that arrived during the hack.
What it costs: DIY or a technician
Recovery through Facebook is free. You pay with time, usually 30 minutes to a couple of days depending on how the takeover happened. A password manager and a security key are optional costs. Beware of anyone who claims to "hack back" your account or guarantees recovery for a fee: Facebook's official routes are free, and recovery services found through ads or comments are a common second scam.
| Route | Cost | Good for |
|---|---|---|
| Facebook's official recovery | Free | Everyone, start here |
| Securing email, devices and other accounts yourself | Your time, optional password manager | Most people who can follow checklists |
| Remote guided session | 119.99$ CAD for a 60 min Expert Consultation | Several accounts hit, business Pages, malware suspected |
A technician cannot recover a Facebook account on Meta's behalf. What we can do is help with everything around it: checking your computer or phone, setting up stronger sign-in, securing email, and walking you through Facebook's own recovery while you stay in control. IT Cares is not affiliated with Meta or Facebook.
Prevent it from happening again
- Keep an up-to-date backup email and phone on your account that only you control.
- Use a unique password and a password manager.
- Turn on two-factor authentication with an authenticator app where possible.
- Never log in through links in emails or messages. Type the address or use the app.
- Never share a code, even with a friend: call them to check.
- Review Where you're logged in every few months and log out old devices.
- Keep your email account at least as secure as your Facebook, since it can reset everything.
- Be cautious around Black Friday and holiday messages: see our Black Friday scam survival guide.
When to call a pro
Ask for help if you are locked out of both email and Facebook, if money has left your accounts, if a business Page is hit, if you suspect malware, or if you simply want someone alongside you. IT Cares provides remote support across Canada. Call 1 (888) 711-9428 or book a session with the button above.
Still stuck? Get a technician on it now
Remote support from IT Cares: we connect to your device, fix it with you watching, and explain what happened.
Frequently asked questions
Related guides
- Facebook account hacked: recovery guide
- Facebook account hacked recovery service
- Instagram account hacked recovery
- Email account hacked: recovery guide
- How to set up two-factor authentication
- Password manager guide
- What is phishing
- Identity theft recovery guide
- Black Friday and Cyber Monday scams
- IT Cares AI services shop
Sources and official references
Last verified: November 13, 2026
- Facebook Help Center: Recover your Facebook account if you were hacked (opened 2026-11-13)
- Facebook Help Center: Recover a hacked account (opened 2026-11-13)
- Facebook Help Center: Recover your account if you can't access your email or mobile number (via search 2026-11-13)
- Facebook Help Center: Recover your Facebook account if you can't log in
- Canadian Anti-Fraud Centre: report fraud