How to Recover a Hacked Instagram Account in India [2026]

Picture this. It is a Sunday morning in Pune, and you open Instagram to find a login screen instead of your feed. Your password does not work. Then a friend messages you on WhatsApp: "Why are you promoting crypto on your story?" Someone else is inside your account right now, talking to your friends as if they were you.

Honestly? This happens to thousands of Indians every month, from college students in Indore to small business owners in Jaipur who run their shop through Instagram DMs. Most hacked accounts can be recovered, but only if you move fast and use Instagram's official recovery path instead of paying a random "account recovery expert."

This guide walks you through exactly what to do, in order, from the first panicked minute to locking the account down so it never happens again.

First, Do These Things in the Next 10 Minutes

Speed matters here. A hacker usually changes your password first, then your email and phone number, then starts messaging your contacts. Do these steps right now.

1. Try to log in once, from your own phone. Use the Instagram app, not a link someone sent you. If your password fails, tap "Forgot password?" and check whether Instagram still sends a reset link to your email or phone.
2. Check your email inbox, including spam. Instagram sends an email the moment your email address or password is changed. That email contains a "secure your account here" link that can undo the change, but only for a limited time. Open it fast.
3. Tell two or three close friends. Ask them to warn others that your account is hacked and not to send money or click links from it. One quick WhatsApp message to a group can stop a scam before it starts.
4. Do not pay anyone who offers to recover your account. Instagram recovery is free. Anyone asking for ₹2,000 or ₹5,000 on Telegram or WhatsApp to "hack it back" is almost certainly running a second scam on you.
5. Screenshot everything: the hacker's posts, stories, changed bio, and messages your friends received.

If you got the password-reset email, change your password immediately from that link, then jump to the lock-down section below. If you did not get it, keep reading.

Try Instagram's Own Recovery Flow First

Instagram built a recovery flow for exactly this situation. It works better than most people expect, but you have to follow it on the app itself and answer honestly. Third-party websites that promise instant recovery are fake.

If You Still Have Access to Your Email or Phone

Open the Instagram app and tap "Forgot password?" on the login screen. Enter your username, email, or phone number. Instagram will send a login link or code to whichever contact detail the hacker has not changed yet. Use that link within minutes, because reset links expire.

Once you are in, change your password right away. Pick something long and fresh, not a password you use on Gmail, Facebook, or any shopping app. Then check Settings, then Accounts Centre, then Password and security, and look at "Where you're logged in." Log out every device you do not recognise, starting with any device in a city you have never visited.

If the Hacker Changed Your Email and Phone Number

This is the scary version, and it is also the most common one. When Instagram asks for your email or phone, tap "Can't reset your password?" or "Need more help?" on that same screen. Instagram will then ask a few questions to confirm you are the real owner, such as your old email address, your phone number, and the type of account.

You may also be asked to record a short video selfie. Instagram compares that video with the photos on your account to confirm your identity. Use good light, face the camera straight, and follow the on-screen turns. Do not wear sunglasses or a mask for this step.

After you submit, Instagram usually replies within 24 to 72 hours, though some users in India report waiting up to a week during busy periods. Check the email you submitted, including spam, every day. Reply to Instagram only through the official email thread. Never share the code Instagram sends you with anyone, even someone claiming to be Instagram support on a call.

Use the "My Account Was Hacked" Form

If the in-app flow stalls, there is a second door. Search Google for "Instagram hacked account report" and open the official Instagram Help Centre page, or go through the app: on the login screen, tap "Get help logging in," then "My account was hacked." Fill in the form with your username, the email you originally used, and a clear description of what changed.

Be specific in that description. Write something like: "On 20 October, my password and email were changed without my permission, and my account is now posting crypto investment stories." Vague reports get slower replies. If your account is a business account, mention that too, because business accounts with linked Facebook Pages sometimes get routed to a faster review queue.

What If Instagram Rejects Your Request?

A rejection email feels like the end, but it is often just a weak first attempt. Here is what to try next.

• Resubmit with better proof. Your video selfie may have been blurry, or the lighting may have been poor. Record it again in daylight, without filters, and resubmit.
• Use an old device and old network. Log in from the phone and Wi-Fi connection you normally used for Instagram. Instagram trusts familiar devices more than a brand-new phone on a new network.
• Check your linked Facebook account. If your Instagram and Facebook accounts are linked through Accounts Centre, recovering Facebook first sometimes lets you get back into Instagram through that link.
• Ask friends to report the hacked account. When several people report the same account for impersonation or hacking, Instagram reviews it faster. Ask friends to report it from inside the app, not through random links.

If none of this works after two honest attempts, wait a week, gather extra proof such as old screenshots of your profile, and submit once more. Some accounts come back on the second or third try. Never buy followers, pay a "hacker for hire," or hand your Aadhaar or bank details to anyone promising recovery. Instagram never asks for those documents through WhatsApp or Telegram.

After You Get Back In, Lock It Down Properly

Getting your account back is only half the job. If you skip this section, the same hacker can walk straight back in through the same weak spot. Work through this checklist in one sitting.

1. Set a new, unique password. Use at least 12 characters with a mix of letters, numbers, and symbols. A password manager app on your phone can generate and remember it for you.
2. Turn on two-factor authentication with an authenticator app. Go to Accounts Centre, then Password and security, then Two-factor authentication. Choose an app like Google Authenticator or Microsoft Authenticator instead of SMS codes alone, because SIM-swap fraud in India can intercept SMS codes.
3. Save your backup codes somewhere safe, in a notes app that locks with your fingerprint, not in a plain gallery screenshot.
4. Review login activity and remove unknown devices. Log out of every session you do not recognise, including old phones you sold or gave away.
5. Check third-party apps connected to Instagram. Remove any app you do not use, especially quiz apps, follower trackers, and "who viewed my profile" apps. These are a classic way accounts get stolen in the first place.
6. Turn on login alerts, so Instagram emails you whenever a new device logs in.

While you are at it, give the same treatment to your email account, because email is the master key to everything else. If a hacker controls your Gmail, they can reset your Instagram password again tomorrow. Turn on two-factor authentication for Gmail too, and use a different password from your Instagram one. For a full phone-level check, read our guide on how to keep your phone safe from hackers.

While You Wait, Warn People and Protect Your Money

Recovery can take days, and the hacker will use those days. Most hacked Instagram accounts in India are not used for fun. They are used to run quick money scams on the owner's friends and followers, usually with a fake emergency, a fake investment, or a fake "I need ₹5,000 urgently, I will return it tonight" story.

Post a warning from another account, or ask a friend to post one: "My Instagram account is hacked. Please do not send money or click links from it until I confirm here." Business owners should put the same warning on WhatsApp status and Facebook, so customers do not pay a scammer by mistake.

If any friend already sent money to the hacker, ask them to act fast: call their bank or UPI app to report the fraud, save the transaction ID and the hacker's UPI ID, and file a complaint on cybercrime.gov.in or by calling 1930. UPI money is hard to reverse, but a fast report gives the bank a real chance to freeze the receiving account. The same caution applies to payment proof, which is why you should also learn how to spot fake UPI payment screenshots in India.

How Accounts Get Hacked in the First Place

Real talk: most Instagram hacks are not movie-style hacking. They are simple tricks that work because we are busy and trusting. Knowing the tricks makes you much harder to fool next time.

Phishing links are the biggest one. You get a DM saying your account will be deleted, or you won a giveaway. The link opens a page that looks exactly like Instagram's login page. You type your password, and the scammer now has it. Instagram never asks you to log in through a link sent in a DM.

Then there are the dodgy apps. Any app that asks for your Instagram password to show you who unfollowed you, or to boost your followers, should be treated as a risk. Use only apps that log in through Instagram's official login screen, and never type your Instagram password into a third-party app directly. If your WhatsApp was also targeted, read our guide on how to secure your WhatsApp account from hackers in India, and for your Facebook profile, see how to secure your Facebook account from hackers in India.

<h2>Questions People Actually Ask</h2>