For many creators, a YouTube channel is a business. When it is hijacked to stream a cryptocurrency scam, or terminated while you sleep, the loss is not just videos, it is subscribers, watch time and income. This guide explains the two problems, shows the order that gives you the best chance, and links to the official YouTube pages for each step.
We checked each policy and link against YouTube and Google help pages on October 30, 2026. Where YouTube does not publish a number, such as a guaranteed appeal turnaround, we say so.
A hack can become a termination in hours
The usual chain is: a malware-laden 'sponsorship' file steals your session, the attacker renames the channel, goes live with a crypto giveaway, and automated systems issue strikes or a termination. If that is your case, the order is account recovery, then clean-up, then a clear appeal that explains the hack.
Hacked vs. Terminated: How to Tell Which One Happened
| Sign | Likely hacked | Likely terminated |
|---|---|---|
| Google sign-in | Password or recovery info changed, or unknown sessions | You can sign in, but the channel is gone or restricted |
| Channel content | Videos, livestreams or branding you did not create | Content removed by YouTube, with a policy email |
| Email from YouTube | Security alerts or notices about activity you did not do | A notice naming a policy and an action |
| Studio | Unknown managers or settings changed | A message with Begin Review or appeal options |
| First move | Recover the Google Account, clean up, secure | Read the notice, then appeal in Studio |
How Creator Channels Actually Get Hijacked
Fake sponsorship and brand-deal emails. Google warns that fake sponsorship or collaboration emails can link to malicious downloads. These files ask you to run 'a brand's software' or 'a video brief'. The malware steals session data, not just passwords.
Session cookie theft. A stolen browser session cookie lets an attacker use your signed-in session without the password and sometimes without a second factor. Google's Threat Analysis Group has described this exact method being used to take over creator channels and broadcast crypto scams. Read their write-up to see how the lure looks.
Phishing that imitates Google or YouTube. Fake 'copyright claim' or 'monetization review' emails send you to a sign-in page that captures your login and code. Real notices appear in YouTube Studio, so check there instead of using the email link.
Password reuse and a weak recovery email. If the recovery email or phone tied to the Google Account was compromised, the attacker uses it to take over the account and therefore the channel.
Too many people with access. Old editors, agencies or managers who still have permissions are a quiet risk. Remove anyone who no longer needs access.
Not sure how they got in?
YouTube can help you recover the channel, but it cannot clean the computer that was infected. Our certified bilingual technician scans for cookie stealers and keyloggers, secures your Google Account and sets up 2-step verification correctly.
How YouTube Strikes and Terminations Work
YouTube's strike system starts with a warning for a first violation in most cases. Eligible warnings can expire 90 days after you complete optional policy training, and violating the same policy in that window can lead to a strike. A first strike blocks specified posting and publishing features for one week. A second strike inside the same 90 days blocks posting for two weeks. Three strikes in that period can result in permanent removal of the channel, and a single severe violation can lead to termination with no warning.
| Stage | What happens | What to do |
|---|---|---|
| Warning | Notice, no strike for a first violation in most cases | Take the policy training if offered, fix the content |
| Strike 1 | Posting features blocked for one week | Appeal if mistaken; if hacked, say so |
| Strike 2 (within 90 days) | Posting blocked for two weeks | Appeal and clean up any unauthorized content |
| Strike 3 (within 90 days) | Channel can be permanently removed | Appeal via Studio and explain a hack with dates |
| Severe single violation | Termination without a warning | Appeal; review the notice for the exact policy |
'Channel recovery' and 'unban' services are scams
Nobody outside Google and YouTube can restore a channel, remove a strike or reverse a termination. Anyone who asks for your password, a verification code, a session cookie or payment is the attacker or a fraudster. Use only YouTube Studio and the official Help Center.
Appealing a Termination After a Hack
If your channel was terminated after the hack, check your inbox for an email with appeal details once you recover your Google Account, then use the appeal in YouTube Studio (Begin Review, then Start Appeal) or the official appeal form. YouTube's termination page says creators have up to one year to appeal and describes limits on repeat appeals, so make the first appeal complete. See also the channel termination help page.
A good appeal is short and specific. State that the channel was compromised and give the dates you lost access. List what the attacker did, such as renaming the channel or streaming a giveaway. Say what you have changed since. Attach nothing that is not requested and never paste passwords or codes.
Locked Out Completely: Recovery Info Changed
If the attacker changed your password, recovery email and phone, the Google account recovery flow is your only route, and it rewards patience and familiar signals:
- Start recovery on a device and in a location you have used before, such as your usual computer at home
- Use the recovery email or phone you set up originally, and answer questions as you would have at account creation
- Try the last password you remember, even if it is old
- Do not create multiple tickets or repeated attempts in quick succession
- After you regain access, change the password and finish the Security Checkup before touching the channel
Once the account is yours again, follow YouTube's hacked channel steps and the guide to securing your channel.
If You Cannot Get the Old Channel Back
YouTube's second chance pilot may allow some terminated creators to request a new channel one year after termination. It is not available to everyone, it excludes terminations for copyright infringement and Creator Responsibility policy violations, and it does not reinstate the old channel. Read the current rules at YouTube's rejoining page. In the meantime, keep copies of your uploads and audience contacts offline.
Hardening Your Channel Afterwards
- 2-Step Verification with a passkey or security key on the owner account
- A separate email address used only for Google, not publicly listed anywhere
- One dedicated browser profile for the channel, with minimal extensions
- Never run files from sponsors or brand contacts. Ask for a link to a standard document, and verify the company independently
- Check the Studio notifications instead of clicking email links about copyright or monetization
- Review channel permissions each quarter and remove old managers
7 Steps to Recover a Hacked or Terminated YouTube Channel
Recover the Google Account first, not the channel
A YouTube channel lives inside a Google Account, so recovering the account is step one. If you can still sign in, change the password and run the Security Checkup. If you cannot, use Google's account recovery and set a new password you have never used.
Delete anything you did not upload and revert changes
Per YouTube's hacked channel guidance, undo unwanted edits, uploads and settings changes right away to avoid policy problems such as Community Guidelines or copyright strikes. Delete videos or livestreams you did not create. The clean-up guide lists what to check.
Remove unknown sessions, channel managers and connected apps
In your Google Account security page, sign out of devices you do not recognize and remove third-party access you did not approve. In YouTube Studio, review Permissions and remove managers you did not add. Make sure every real channel manager also secures their own account.
Turn on 2-Step Verification and prefer passkeys or security keys
Add 2-Step Verification to the Google Account, store the backup codes offline, and consider a passkey or a hardware security key for the account that owns the channel. This is the single biggest step against a repeat takeover.
Clean the computer before you log in again
Hijacks of creator channels are often cookie theft by malware, not password guessing. Google's Threat Analysis Group describes phishing aimed at YouTube creators that steals browser session cookies. Run a full malware scan and remove unknown extensions, or a new password will not help.
Contact Creator Support if you are eligible, within 9 months
YouTube's help page says support covers potential hacking incidents from within the past nine months. If you have recovered the Google Account and still see problems on the channel, contact Creator Support from YouTube Studio. If you are a creator without that option, use the Help Center contact paths shown on the page.
Appeal a strike or termination, and say it was unauthorized
For a termination, use the appeal in YouTube Studio (Begin Review, then Start Appeal) or the official appeal form. YouTube warns that an appeal may not be accepted if account recovery is incomplete, so finish steps 1 to 3 first. Explain plainly that the content came from an attacker and give dates.
Want a person to handle the clean-up with you?
Our technician can join you on a remote session, scan the computer for cookie stealers and help you prepare a clear, complete appeal.
Worried malware caused the hijack?
YouTube can restore the channel but cannot clean your computer. IT Cares scans for session-stealing malware, hardens your Google Account and sets up 2-step verification correctly.
Frequently Asked Questions
How do I know if my YouTube channel was hacked?
Typical signs are videos or livestreams you did not make, a changed channel name, photo or description, new unknown channel managers, deleted content, or a sudden email about strikes or a termination. A crypto giveaway livestream on your channel is a classic takeover sign.
What is the difference between a hacked channel and a terminated channel?
A hacked channel means someone else controls it through your Google Account. A terminated channel means YouTube removed it for policy violations. They overlap when an attacker's uploads or livestreams cause strikes, which is why recovery comes first and the appeal comes second.
How many strikes before a YouTube channel is terminated?
YouTube's rule is three Community Guidelines strikes within a 90-day period, and a single severe violation can lead to termination without a warning. The first violation is typically a warning. A first strike blocks specified posting features for one week and a second strike within the same 90 days blocks posting for two weeks.
How long do I have to appeal a YouTube termination?
YouTube's termination help page says creators have up to one year to appeal, with limits on repeat appeals. It does not promise a fixed turnaround, and Studio shows the anticipated review time. Finish account recovery first, because an incomplete recovery can sink the appeal.
Can I start a new channel after a termination?
Not by default, and not on the terminated account. YouTube's second chance pilot may let some terminated creators request a new channel one year after termination. It excludes terminations for copyright infringement and Creator Responsibility violations, and it does not reinstate the old channel.
Do channel recovery services or 'YouTube unban' sellers work?
No. Only YouTube and Google can restore a channel or reverse a termination. Anyone who asks for your password, a verification code, a session cookie, or payment to recover a channel is the attacker or a scammer.