Last materially reviewed: September 3, 2026
Direct Answer
If your Facebook account is hacked, secure the connected email account first, then use Facebook’s official recovery process, change the Facebook password, end unfamiliar sessions, and enable two-factor authentication. If the attacker used the account for fraud or impersonation, preserve screenshots and transaction evidence before content disappears.
Primary guidance: Meta / Facebook — Hacked Account Recovery; suspected criminal misuse can also be reported through the DOJ Office of Cybercrime.
Key Takeaways
Secure the recovery channel. Email compromise can let an attacker retake Facebook. Use official recovery tools. Avoid third-party “account recovery” services. Preserve evidence. Save messages, login alerts and payment records. Enable MFA. Protect both Facebook and the connected email account.
Decision Snapshot
Still have email access? Secure email and start Facebook recovery. Attacker changed recovery details? Use Facebook’s compromised-account flow from a familiar device. Money was stolen? Contact the bank or e-wallet and preserve transaction records. Identity misuse or scam activity? Save evidence and consider reporting through Philippine cybercrime channels.
If your Facebook account was hacked, secure the email address and phone number connected to the account first. An attacker who controls your email can repeatedly take Facebook back even after you reset the Facebook password.
Immediate Recovery Steps
- Use Facebook’s official account-recovery flow from a device you have used before.
- Secure the email account linked to Facebook and change its password.
- Change your Facebook password to a new, unique password.
- Review active sessions and log out devices you do not recognize.
- Turn on two-factor authentication.
- Check whether the attacker changed your email address, phone number, name, page roles, or ad-account access.
- Warn friends and family not to send money or share codes in response to messages from the compromised account.
Check Your Email for Facebook Security Notices
Look for legitimate notices showing that your password, email address, phone number, or other account information changed. These can help you identify when the takeover occurred and may provide a way to reverse an unauthorized change. Be careful with fake recovery emails sent by scammers after an account compromise.
Review What the Attacker Did
Check Messenger conversations, recent posts, Marketplace activity, groups, pages you manage, linked Instagram accounts, Meta Business assets, saved payment methods, and advertising activity. Business accounts can create wider risks if the compromised Facebook profile has administrator access to pages or ad accounts.
Preserve Evidence Before Deleting Anything
Save screenshots of suspicious messages, changed account information, login alerts, fraudulent posts, payment requests, and messages from people who were contacted. If money was requested or sent, keep receipts, account numbers, e-wallet details, transaction references, and conversation records.
For fraud evidence, see the Online Scam Evidence Checklist Philippines.
If the Hacker Is Impersonating You
Tell close contacts through another trusted channel that the account was compromised. If the attacker created a separate fake account using your name or photos, report the impersonating profile through Facebook and preserve screenshots before it disappears.
If Money Was Stolen
Contact the bank, e-wallet, payment provider, or card issuer as quickly as possible. Ask whether the transaction can be frozen, disputed, or traced. Preserve the transaction record and consider reporting the incident through the appropriate Philippine cybercrime channel.
Where to Report in the Philippines
Account hacking, fraud, identity misuse, and online scams may be reportable to Philippine cybercrime authorities depending on the facts. Cybercode’s Cybercrime Reporting Directory Philippines lists practical reporting channels.
How to Reduce the Risk of Another Takeover
- Use a unique Facebook password.
- Protect your email account with MFA.
- Do not share one-time passwords or recovery codes.
- Review connected apps and remove ones you no longer use.
- Be suspicious of copyright, verification, page-policy, and advertising messages that pressure you to log in through an unfamiliar link.
- Keep recovery email addresses and phone numbers current.
Official Sources
Meta / Facebook — Hacked Account Recovery
Meta Help Center — Securing a Hacked Account
DOJ Office of Cybercrime
Frequently Asked Questions
Can a hacked Facebook account be recovered?
Often yes, especially if you still control the linked email or phone number and can prove account ownership. Recovery becomes harder if the attacker has changed multiple recovery methods.
Should I create a new Facebook account immediately?
Usually try recovery first. Creating a second account can confuse contacts while the compromised account remains active and continues sending scam messages.