Hacked Facebook Account: How to Recover It and Warn Your Contacts

If your Facebook account has been taken over by a scammer, acting quickly can limit the damage. This guide walks you through every recovery step and shows you how to warn your contacts before they get hurt.

Why Facebook Accounts Are a Prime Target

A Facebook account is far more valuable to a scammer than most people realise. It holds years of personal history, a ready-made list of friends who already trust you, and — for many Filipinos — it doubles as a login credential for other apps and services. Once a bad actor gains access, they can impersonate you to borrow money via GCash or Maya, post fraudulent links, sell items that will never be delivered, or even sell your account outright on underground marketplaces. Understanding why your account is a target is the first step toward taking the threat seriously and acting fast when something goes wrong. If you ever receive a suspicious link or message that seems to come from a friend's account, you can run a free scam check on TsekMuna before clicking anything.

Warning Signs That Your Account Has Been Compromised

Account takeovers do not always announce themselves loudly. Sometimes the first clue comes from a concerned friend who received a strange message "from you." Other times you simply cannot log in, or you notice posts and transactions you never made. Familiarise yourself with the red flags so you can respond at the first sign of trouble.

Warning signs

• You are suddenly logged out and your password no longer works.
• Friends message you saying they received unusual requests for money or strange links from your account.
• You receive an email from Facebook saying your password or email address was changed — but you did not do it.
• Unfamiliar devices or locations appear in your Facebook security log.
• Your linked GCash or Maya number has been changed without your knowledge.
• Posts, comments, or Marketplace listings appear on your profile that you did not create.
• Your recovery email or phone number has been swapped out.

Immediate Steps to Recover a Hacked Facebook Account

Speed matters enormously during an account takeover. The longer a scammer holds your account, the more damage they can do to your reputation and to the people who trust you. Work through these steps in order, even if you have to do them from a friend's device or a different browser.

1. Go to facebook.com/hacked — Facebook's official account-recovery portal — and select 'My account is compromised.' You do not need to be logged in to start this process.
2. Enter the email address, phone number, or username tied to your account. Facebook will attempt to verify your identity.
3. If your recovery email or phone has been changed by the attacker, choose 'No longer have access to these?' and follow the identity-verification flow, which may ask you to upload a government-issued ID (e.g., PhilSys, driver's licence, or passport).
4. Once Facebook confirms your identity, choose a strong new password — at least 12 characters, mixing letters, numbers, and symbols. Never reuse a password from another account.
5. Immediately review 'Security and Login' settings: check all active sessions and click 'Log Out of All Sessions' to kick the attacker out of every device.
6. Enable Two-Factor Authentication (2FA) right away. Use an authenticator app (such as Google Authenticator) rather than SMS alone, since SIM-swap scams are common in the Philippines.
7. Check 'Apps and Websites' under Settings and remove any unfamiliar third-party apps that were granted access to your account.
8. Review your email inbox for the account linked to Facebook — change that password too, because the attacker may have accessed it as well.
9. Check whether your Facebook account is used to log in to other services (Shopee, Lazada, dating apps, etc.) and change those passwords or switch to a dedicated login.

If Facebook's automated recovery flow fails, visit the Facebook Help Center and look for 'Get More Help' to reach a human review. Be patient — this process can take several days, but it is worth completing fully.

How to Warn Your Contacts Quickly

Even while you are mid-recovery, your friends and family could be receiving scam messages that appear to come from you. Alerting them as fast as possible is just as important as reclaiming the account itself. Use every channel available to you — SMS, a secondary Facebook account, Viber, Messenger on another device — to spread the word. Learning how to spot a scam can also help your contacts recognise future impostor attempts.

What to do instead

• Send a mass SMS or group chat message on Viber/WhatsApp from your phone number saying: 'My Facebook account was hacked. Please ignore any messages or requests you received from my account. Do not send money or click any links.'
• Ask a trusted friend or family member to post a public warning on their own Facebook page tagging you (or just naming you) so your mutual contacts are alerted.
• If you regain access, post a clear, pinned status update warning on your recovered account immediately.
• Contact anyone who may have already sent money or clicked a link and advise them to secure their own accounts and monitor their GCash/Maya wallets.
• Ask friends to report the compromised account to Facebook as 'Hacked' to help accelerate platform intervention.

Protecting Friends Who Were Targeted While Your Account Was Hacked

A hacked Facebook account in the Philippines is frequently weaponised to run advance-fee scams ("I'm in trouble, please send load or GCash"), fake Marketplace listings, or phishing links disguised as videos or news articles. If any of your contacts were deceived, they need guidance too. Direct them to TsekMuna's scam education hub for practical advice on what to do after falling for a scam, and remind them to change their own passwords if they clicked any link sent from your account. If money was transferred, they should contact their bank or e-wallet provider immediately to attempt a reversal — BSP's Financial Consumer Protection guidelines give consumers avenues to dispute unauthorised transactions.

What to do instead

• Ask affected contacts to change their Facebook password and enable 2FA right away.
• Advise them to report any GCash or Maya transfers made to unknown numbers to the respective e-wallet provider's fraud hotline.
• Encourage them to file a complaint with BSP (for e-wallet issues) or their bank's fraud department if money was lost.
• Remind them never to send money based on a Facebook Messenger request alone — always verify through a phone call or in person.

Scammers often pose as a distressed friend and create urgency ('I need GCash now, I'll explain later!'). Teach your contacts that a real emergency can always survive a 60-second phone call to confirm.

How to Secure Your Account and Prevent Future Takeovers

Recovery is only half the battle. Once you have your account back, hardening it against future attacks is essential. This guidance is advisory only and not legal advice. Think of account security as an ongoing habit rather than a one-time fix.

What to do instead

• Use a unique, strong password for Facebook that you do not use anywhere else. A password manager makes this easy to maintain.
• Enable Two-Factor Authentication using an authenticator app. Go to Settings → Security and Login → Two-Factor Authentication.
• Set up 'Trusted Contacts' in Facebook security settings — these are friends Facebook can contact to help you recover your account if you are locked out.
• Review your 'Login Alerts' settings so Facebook notifies you any time a new device or browser logs in.
• Be sceptical of any message asking you to click a link to 'verify your account,' 'see who viewed your profile,' or 'claim a prize' — these are classic phishing triggers.
• Never enter your Facebook credentials on any website other than facebook.com. Always check the browser address bar.
• Periodically audit Apps and Websites in your Facebook Settings and revoke access to any app you no longer use.
• Keep the email address linked to your Facebook account secure — give it its own strong password and 2FA.

Set a recurring personal reminder every few months to review your Facebook security settings, active sessions, and linked apps. A quick audit takes under five minutes and can catch problems early.

Reporting the Hack to Philippine Authorities

If the attacker used your account to defraud your contacts or extort you, this is a criminal matter under the Cybercrime Prevention Act of 2012 (Republic Act 10175). You have the right to file a complaint with the Philippine National Police Anti-Cybercrime Group (PNP-ACG) or the National Bureau of Investigation (NBI) Cybercrime Division. Gather as much evidence as possible before you file — screenshots of the attacker's messages, Facebook's notification emails about the account changes, and records of any financial transactions that took place. You can also find step-by-step guidance in our scam reporting guide to help you prepare your complaint properly.

1. Screenshot everything: the suspicious messages sent from your account, Facebook's security notification emails, and any money-transfer confirmations your contacts share with you.
2. Write a chronological narrative of events — when you noticed the hack, what changes were made, and who was affected.
3. Visit the PNP-ACG website or go to Camp Crame (Quezon City) to file a cyber complaint, or use their online reporting form.
4. Alternatively, go to the NBI Cybercrime Division at NBI Headquarters, Taft Avenue, Manila.
5. Bring a valid government-issued ID and printed copies of all screenshots and evidence.
6. If money was lost, also file a complaint with BSP through their Consumer Assistance Management System (CAMS) online portal.

Run a free scam check · More scam-safety guides