Social Media Security
How to Tell If Your Social Media Account Was Hacked
Signs of social media account takeover include posts you did not make, messages you did not send, changed recovery settings, unknown sessions, or login alerts. Verify inside the official app, secure the account, and warn contacts if scams were sent.
Common warning signs
Look for unknown posts, changed profile details, messages asking friends for money, new linked accounts, unfamiliar devices, or recovery methods you do not control.
A suspicious message does not automatically prove takeover, but settings changes and successful unknown sessions deserve immediate action.
- Unknown posts
- Suspicious direct messages
- Changed email or phone
- Unrecognized sessions
Check from the official app
Open the platform directly and review account activity, devices, login alerts, connected apps, and security settings. Avoid recovery links sent through suspicious messages.
- Use official app.
- Review device list.
- Check connected apps.
Protect private information
Do not send passwords, one-time codes, ID documents, or payment details to anyone claiming they can recover the account. Use the platform's official recovery process.
Regain and secure access
Change the password, remove unknown sessions, reset recovery methods, and enable multifactor authentication. Use a unique password that is not used on email or other platforms.
- Change password.
- Remove sessions.
- Enable MFA.
Undo harmful changes
Review recent posts, messages, ads, payment methods, connected apps, and profile settings. Delete scam posts and revoke access that you did not authorize.
- Review posts.
- Check payment settings.
- Revoke apps.
Warn contacts if messages were sent
If your account sent scam messages, tell close contacts through another channel. Keep the warning factual and avoid posting private evidence publicly.
- Notify contacts.
- Report scams.
- Preserve private evidence.
Check exposure context
Credential exposure can contribute to account takeover when passwords are reused. 4safer can show known exposure context for owned identifiers, but it cannot prove how a platform account was accessed.
Frequently asked questions
Should I pay someone to recover my account?
No. Use the platform's official recovery process and be cautious of recovery scams.
Can a reused password cause social media takeover?
Yes. If one reused password is exposed, attackers may try it on other services.
Should I delete the account?
Not immediately. First secure it, remove unauthorized activity, and preserve evidence if needed.
Sources
This guide is reviewed against official guidance. External pages may be updated by their respective owners.