What Happens After Your Facebook Account Gets Hacked?
Facebook account takeovers are one of the most common incidents KNOMI handles. The damage rarely stops with the account itself: attackers use your identity to scam your friends, target Marketplace buyers, and pivot into your Instagram and connected business pages. Here's what really happens behind the scenes.
Inside the first hour
The attacker logs in, changes the password, swaps the recovery email and phone, and removes other devices. They then turn on a new 2FA method so you can't get back in. Within minutes they start messaging your contacts with crypto, gift card or 'investment opportunity' pitches — because friends trust friends.
Why Meta is slow to respond
Meta's automated recovery flow assumes you can still access your old email or phone. Once those have been changed, the standard 'Forgot password' loop won't help. You'll need to use facebook.com/hacked, submit ID through the dedicated identity-verification flow, and sometimes wait days. There is no phone hotline for consumers — KNOMI Cyber escalates these through structured evidence packs that are far more likely to land.
What to do right now
- Go to facebook.com/hacked from a clean device
- Warn your contacts on another channel that your account is compromised
- Check Instagram, Messenger, Oculus and any linked Business Manager
- Capture screenshots of all scam messages sent from your account
After you're back in
Recovery isn't the finish line — clean-up is. Remove unknown sessions, revoke connected apps, audit linked ad accounts and Pages, and rotate the password on the email tied to Facebook (this is often the real point of compromise). KNOMI Cyber helps Australians not only recover the account but also stop the next attack — because the data that let them in once is still out there.
Frequently asked questions
Can KNOMI recover a hacked Facebook account?
KNOMI guides you through Meta's recovery flows, prepares an evidence pack and helps you message contacts safely. We cannot bypass Meta's processes, but we make sure your submission is complete.
Will my friends know my account was hacked?
They'll often see scam messages first. Posting a warning from another account or via SMS is one of the most important first steps.
How do I prevent this happening again?
Use a unique password, turn on app-based 2FA (not SMS), and run a KNOMI Cyber Score check on the email behind your social accounts.