Threats & attacks
Locked Out After a Hacker Changed Your Email and Password
This is the full-compromise case: normal reset links now land in the attacker's inbox. You get back in by passing each platform's own identity check, not by bypassing anything. Owner-only, no credentials collected.
Find your platform's recovery routeOfficial tools only
Every route is the platform's own Help Center form
No password, ever
We never ask for or store your credentials or codes
Owner-only by design
Steps prove your ownership; they can't reach anyone else's account
No false promises
We don't guarantee recovery, timelines, or attacker identity
Links point to Instagram, TikTok, X, and LinkedIn's official support — open them from inside the app, not from a search ad.
How each platform lets the genuine owner recover when the recovery email and phone are gone
| Provider | Official 'my account was hacked' form | Government-ID identity check | Video-selfie liveness proof | Escalates when recovery phone was ALSO changed |
|---|---|---|---|---|
| Instagram — Help Center 'Get more help logging in' | Yes | Yes | Yes | If eligible |
| TikTok — Report a Problem / hacked-account request | Via form | If eligible | No | If eligible |
| X (Twitter) — Help Center hacked-account support ticket | Via form | If eligible | No | If eligible |
| LinkedIn — Help Center identity verification | Yes | Yes | If eligible | Yes |
We do
- ✓ Route you to each platform's official hacked-account and identity-verification forms
- ✓ Help you assemble owner-proof: original email, ID, past passwords, creation date, receipts
- ✓ Show how to read the 'your email was changed' notice for the reversal window it may contain
- ✓ Walk you through locking the account down once you're back in
We never
- ✗ Access, reset, or 'bypass' any account that isn't yours
- ✗ Ask for, store, or handle your password or one-time codes
- ✗ Bypass 2FA, OTP, or a platform's own identity check
- ✗ Identify, name, or track down the attacker for you
Every step here proves that YOU are the genuine account owner to the platform itself. Nothing on this page helps anyone reach an account they don't own, and we never touch your credentials.
Right now — full compromise
- Recovery email and phone both changed, so reset links go to the attacker
- Your password no longer works and 'forgot password' loops back to their contact info
- The platform's 'your email was changed' notice sits unread in your old inbox
- Standard login and self-service reset paths are dead ends
After official owner-verification
- The platform confirms your identity through its own ID or video-selfie check, not the stolen contacts
- Access restored with a fresh password you set and 2FA re-enabled
- The attacker's devices and sessions signed out from account settings
- Recovery email and phone reset to yours and reviewed
Recovery depends on the platform's review and the proof you can show — no service, ours included, can guarantee it or promise a timeline.
What no one can do for you here — and the official way that actually works
⛔ We can't reset the recovery email or phone the attacker set
Only the platform can change contact info, and only after it verifies the true owner
→ Submit the platform's official hacked-account form and complete its identity check
⛔ We can't recover or reset your password for you
We never handle credentials and no third party can set a platform password
→ Use the platform's own reset flow once identity verification restores your access
⛔ We can't tell you who the attacker is
Attribution needs data that only the platform and law enforcement hold
→ Report the takeover in-platform, and to local authorities if there's fraud or extortion
⛔ We can't guarantee the account comes back
The platform decides from the proof you provide, and some takeovers aren't reversible
→ Provide the strongest ownership evidence you have and escalate through official support
FAQ
The hacker changed my email and my phone — can I still recover my account?
Often yes, because Instagram, TikTok, X, and LinkedIn can verify you through their own identity checks — a government ID, a video selfie, or original account details — instead of the recovery contacts the attacker replaced, though none of them can promise a specific outcome or timeline.
Do I need my old password or a login code to start recovery?
No, you start from the platform's 'my account was hacked' form and prove ownership through its identity verification, and no legitimate step — ours included — will ever ask you to enter your password or a one-time code.
What proof should I have ready before I submit the form?
Gather the email address and phone number that were originally on the account, any past passwords you remember, the device and approximate date you created it, and any purchase or verification receipts, since these are exactly what the platform's review team weighs.
Can you reset the attacker's email back to mine or get into the account for me?
No, because only the platform can change contact details or restore access and it will do so only after verifying you directly, so we prepare and route your request but never touch the account or your credentials.
The attacker also hijacked my phone number — does that change anything?
Yes, if your number was taken through a SIM swap you should secure it with your mobile carrier first and then lean on the platform's ID-based verification rather than SMS, and it's worth reviewing our guidance on protecting your phone number from hijack.