What to Do If Your Facebook Account or Ad Account Is Hacked
Follow these steps immediately to regain access, secure your accounts, and prevent future attacks. Includes direct links to Meta's official recovery tools.
Immediate Steps
If you suspect your account has been compromised, take these steps right away — speed matters.
Secure Your Email First
Your email is the key to everything. Change your email password immediately and enable two-factor authentication. If hackers control your email, they can intercept Facebook recovery codes.
Try to Log In & Change Your Facebook Password
If you can still log in, go to Settings > Security and Login > Change Password immediately. Choose a strong, unique password you haven't used elsewhere.
Enable Two-Factor Authentication
Go to Settings > Security and Login > Two-Factor Authentication. Use an authenticator app (Google Authenticator or Authy) rather than SMS for stronger security.
Review & Remove Unrecognized Devices
Go to Settings > Security and Login > Where You're Logged In. Log out of any sessions or devices you don't recognize. This kicks the hacker off your account.
Check for Unauthorized Ad Campaigns
Open Ads Manager and look for any campaigns you didn't create. Pause them immediately. Check for unfamiliar payment methods and remove them.
If You're Locked Out
Can't log in at all? Use Meta's official recovery tools below.
Facebook Account Recovery Portal
Meta's primary tool for reporting and recovering a compromised account. Start here.
Submit ID Verification
If Facebook requires identity verification to restore your account, upload your ID here.
Report Compromised Account
If you believe your account is being used by someone else, report it directly to Meta.
Ad Account Recovery
If your Facebook Ad Account was compromised, follow these additional steps to stop unauthorized spending and regain control.
Check Ads Manager for Unauthorized Campaigns
Go to Ads Manager and review all active and recently paused campaigns. Look for any ads you didn't create, especially ones with unfamiliar targeting, creatives, or spending patterns. Pause or delete them immediately.
Open Ads ManagerReview & Remove Payment Methods
Go to Ads Manager > Billing > Payment Settings. Remove any payment methods you don't recognize. If a hacker added their own card, they may be using your account for their ads.
View BillingCheck Business Manager for Unknown Users
Open Business Settings and review People, Partners, and Ad Accounts. Remove any users or partners you didn't authorize. This is how hackers maintain access even after you change your password.
Business SettingsRequest Ad Account Review (If Disabled)
If Meta disabled your ad account due to suspicious activity, you can request a review to have it reinstated. Include details about the hack in your appeal.
Request ReviewDispute Unauthorized Charges
Contact Meta's billing support to dispute charges from unauthorized ad campaigns. You can also contact your bank or credit card company to file a chargeback for any fraudulent charges made during the hack.
Prevent Future Hacks
Once you've recovered your account, take these steps to make sure it doesn't happen again.
Helpful Meta Links
How Walled Garden Protects You
With Walled Garden, you don't need your own Facebook ad account at all. All ads run through Walled Garden's own ad account infrastructure — powered directly from your Facebook Business Page. That means even if your personal Facebook account or ad account is compromised, your advertising through Walled Garden is unaffected. Your agents never need access to a shared Business Manager or ad account, dramatically reducing your attack surface.
Learn more about Walled GardenFrequently Asked Questions
What should I do first if my Facebook account is hacked?
Immediately secure your email account by changing its password and enabling two-factor authentication. Then try to log into Facebook and change your password. If you can't log in, visit facebook.com/hacked to start the recovery process.
How do I recover a hacked Facebook ad account?
Log into Ads Manager and pause all active campaigns you didn't create. Review and remove any unfamiliar payment methods. Check Business Manager settings for unauthorized users. If your ad account was disabled, submit an appeal through Meta's ad account review form.
How can I prevent my Facebook account from being hacked?
Enable two-factor authentication, use a strong unique password, review connected apps regularly, set up login alerts, and limit the number of people with admin access to your ad accounts.
Can I get a refund for unauthorized Facebook ad charges?
Yes. You can dispute unauthorized charges directly with Meta through Ads Manager billing support, or contact your bank/credit card company to file a chargeback for fraudulent charges.