Step-by-step instructions
Visit the official recovery address yourself
Type facebook.com/hacked directly into the browser, ideally on a device or browser you used to log in before. Meta recommends a familiar device. Avoid recovery links received in Messenger, suspicious emails or “account support” comments that lead to unfamiliar domains.
If you can still log in, secure the session immediately
Change the password to a new unique phrase. Review where you are logged in and sign out unknown sessions using Facebook’s security settings. Check whether unfamiliar phone numbers, emails or business Page roles were added without permission.
If login fails, follow account recovery prompts
Use the account-recovery steps associated with your profile and the methods Meta currently offers. Try from a device and connection previously used for Facebook. If the hacker changed the recovery email or phone, use Meta’s specific changed-contact-information assistance rather than random unofficial tools.
Protect the email account behind Facebook
Your email often controls password resets, so secure its login, recovery methods and device sessions as well. Change any other password reused on Facebook. If you receive unusual Gmail sign-in alerts, use Google’s official account-security instructions.
Warn contacts about fake messages
Let friends, family and page customers know through a separate trusted channel that recent payment requests or links may be fraudulent. Ask them not to transfer money or send OTPs. Avoid forwarding the scam link to more people merely to demonstrate it.
Check Page roles and linked business assets
If you manage a small Nepali shop or local community Page, review administrators and advertising-payment settings after recovery. Remove access you do not recognise using official Meta controls. Keep receipts for any unknown advertising charge and notify the payment provider promptly.
Turn on two-factor authentication and alerts
Use a supported authenticator app or other secure second factor and save backup methods somewhere safe. Review login-alert settings. Do not rely only on SMS if your SIM is missing or other people can access its messages. Store recovery codes securely, not in a public note.
Report impersonation and financial harm separately
If someone created a different profile impersonating you, use Meta’s impersonation reporting route. For threats, extortion or fraud within Nepal, preserve evidence and use the Nepal Police Cyber Bureau official reporting process. Recovery and police investigation are separate processes.
Mistakes to avoid
- Paying “Facebook recovery experts” contacted through social media.
- Sharing a login code with someone who pretends to be Meta support.
- Securing Facebook but leaving a compromised email account unchanged.
Frequently asked questions
Where is the official hacked-account page?
Visit facebook.com/hacked directly, preferably on a familiar device.
Can Facebook guarantee I will recover my account?
No. Recovery depends on verification and available account information.
What if someone is using my photos on a different account?
Use Meta’s impersonation report flow; it differs from recovering a hacked account.
Official sources and further reading
Operator rules, application screens and government procedures can change. Check the latest official instructions before sharing personal details or paying a fee.
How to Secure Your Google Account in NepalA beginner-friendly Google account safety checklist: passwords, 2-step verification, device checks and recovery.