Contents
Instagram account hacking is on the rise in the UK, with attackers using increasingly sophisticated methods. Whether your password was compromised in a data breach, you fell victim to a phishing link, or your account was targeted by SIM-swapping, this guide covers every recovery path available to UK users in 2026.
Signs Your Instagram Account Has Been Hacked
Watch for these indicators: an email from security@mail.instagram.com about an unrecognised login, your email or phone number was changed (you’ll receive an email about this), posts, stories, or DMs you didn’t create, followers or following counts changing unexpectedly, your bio or profile picture changed, or you’re suddenly following accounts you don’t recognise.
If You Can Still Log In
Act immediately: change your password in Settings → Security → Password. Enable two-factor authentication in Settings → Security → Two-Factor Authentication. Check “Login Activity” in Settings → Security and log out any unfamiliar sessions. Review “Apps and Websites” in Settings → Security and revoke access to anything suspicious. Check that your email and phone number haven’t been changed in Settings → Account.
If You’re Locked Out
On the Instagram login screen, tap “Get help logging in” (Android) or “Forgot password?” (iOS). Enter your username, email, or phone number. Instagram will send a login link or security code. If the hacker changed your email, check your old email for a message from Instagram about the change — it should include a “Revert this change” link.
If Your Email Was Changed
Check for an email from security@mail.instagram.com with “Your email address was changed” as the subject. Click “Revert this change” or “Secure your account” in that email. If you didn’t receive this email or it’s expired, visit the login screen → “Get help logging in” → “Need more help?” → fill out the support form with your original email and describe the situation.
Video Selfie Verification
Instagram may ask you to verify your identity through a video selfie. You’ll record a short video of yourself turning your head in different directions. This is compared against photos on your profile. The process is automated and usually takes 24–48 hours. Make sure your lighting is good and your face matches your profile photos. If your profile doesn’t have clear photos of your face, this method may not work.
Securing Your Account After Recovery
Enable two-factor authentication using an authentication app (not SMS). Set a strong, unique password of at least 12 characters. Remove any unfamiliar apps and websites. Review and update your recovery email and phone number. Check saved login information on shared devices. Be cautious of DMs containing links, even from friends — their accounts may also be compromised.