Account Security Guide

What to Do If Your Facebook Account or Ad Account Is Hacked

Follow these steps immediately to regain access, secure your accounts, and prevent future attacks. Includes direct links to Meta's official recovery tools.

Immediate Steps

If you suspect your account has been compromised, take these steps right away — speed matters.

1

Secure Your Email First

Your email is the key to everything. Change your email password immediately and enable two-factor authentication. If hackers control your email, they can intercept Facebook recovery codes.

2

Try to Log In & Change Your Facebook Password

If you can still log in, go to Settings > Security and Login > Change Password immediately. Choose a strong, unique password you haven't used elsewhere.

3

Enable Two-Factor Authentication

Go to Settings > Security and Login > Two-Factor Authentication. Use an authenticator app (Google Authenticator or Authy) rather than SMS for stronger security.

4

Review & Remove Unrecognized Devices

Go to Settings > Security and Login > Where You're Logged In. Log out of any sessions or devices you don't recognize. This kicks the hacker off your account.

5

Check for Unauthorized Ad Campaigns

Open Ads Manager and look for any campaigns you didn't create. Pause them immediately. Check for unfamiliar payment methods and remove them.

If You're Locked Out

Can't log in at all? Use Meta's official recovery tools below.

Facebook Account Recovery Portal

Meta's primary tool for reporting and recovering a compromised account. Start here.

facebook.com/hacked

Submit ID Verification

If Facebook requires identity verification to restore your account, upload your ID here.

ID Verification Form

Report Compromised Account

If you believe your account is being used by someone else, report it directly to Meta.

Report Compromised Account

Ad Account Recovery

If your Facebook Ad Account was compromised, follow these additional steps to stop unauthorized spending and regain control.

Check Ads Manager for Unauthorized Campaigns

Go to Ads Manager and review all active and recently paused campaigns. Look for any ads you didn't create, especially ones with unfamiliar targeting, creatives, or spending patterns. Pause or delete them immediately.

Open Ads Manager

Review & Remove Payment Methods

Go to Ads Manager > Billing > Payment Settings. Remove any payment methods you don't recognize. If a hacker added their own card, they may be using your account for their ads.

View Billing

Check Business Manager for Unknown Users

Open Business Settings and review People, Partners, and Ad Accounts. Remove any users or partners you didn't authorize. This is how hackers maintain access even after you change your password.

Business Settings

Request Ad Account Review (If Disabled)

If Meta disabled your ad account due to suspicious activity, you can request a review to have it reinstated. Include details about the hack in your appeal.

Request Review

Dispute Unauthorized Charges

Contact Meta's billing support to dispute charges from unauthorized ad campaigns. You can also contact your bank or credit card company to file a chargeback for any fraudulent charges made during the hack.

Prevent Future Hacks

Once you've recovered your account, take these steps to make sure it doesn't happen again.

Enable 2FA on Facebook, email, and all linked accounts
Use a unique, strong password (16+ characters recommended)
Review and revoke unnecessary app permissions regularly
Set up login alerts for unrecognized devices
Limit admin access to your ad accounts — only add people who need it
Use a password manager to avoid reusing passwords
Never click suspicious links in messages or emails
Regularly review your Business Manager user list

Helpful Meta Links

How Walled Garden Protects You

With Walled Garden, you don't need your own Facebook ad account at all. All ads run through Walled Garden's own ad account infrastructure — powered directly from your Facebook Business Page. That means even if your personal Facebook account or ad account is compromised, your advertising through Walled Garden is unaffected. Your agents never need access to a shared Business Manager or ad account, dramatically reducing your attack surface.

Learn more about Walled Garden

Frequently Asked Questions

What should I do first if my Facebook account is hacked?

Immediately secure your email account by changing its password and enabling two-factor authentication. Then try to log into Facebook and change your password. If you can't log in, visit facebook.com/hacked to start the recovery process.

How do I recover a hacked Facebook ad account?

Log into Ads Manager and pause all active campaigns you didn't create. Review and remove any unfamiliar payment methods. Check Business Manager settings for unauthorized users. If your ad account was disabled, submit an appeal through Meta's ad account review form.

How can I prevent my Facebook account from being hacked?

Enable two-factor authentication, use a strong unique password, review connected apps regularly, set up login alerts, and limit the number of people with admin access to your ad accounts.

Can I get a refund for unauthorized Facebook ad charges?

Yes. You can dispute unauthorized charges directly with Meta through Ads Manager billing support, or contact your bank/credit card company to file a chargeback for fraudulent charges.

Related Resources

Ready to Start Generating More Real Estate Leads?

Join 2,500+ successful agents using Walled Garden to generate more leads with less effort. Start your free trial today, no credit card required.

Yes, I Want More Leads - Start Free

✓ No Credit Card Required • ✓ 10-Day Free Trial • ✓ Cancel Anytime