Young people & students › Account hacked or fake profile
Email hacked and password changed
What usually matters in this situation, and the papers to keep ready before you meet an advocate or free legal aid (call 15100).
Make my own list — free, 2 minutesYour situation
- What happened? My account was hacked
- Can you still log in? No, I am locked out
Where you stand
- Be careful Anyone offering to "recover" your account for a fee in your DMs is a scammer.
Do these now
- Use the app's official "hacked account" recovery page
Only the official flow can restore access. Where: Help centre of the app — never a "recovery agent" from DMs.
Papers to gather
- Your account username, linked email and phone
Needed for recovery and complaints. Where: Your old messages, email. - Proof it is yours: old screenshots, ID, photos you posted, purchase receipts
Platforms ask for this during recovery. Where: Gallery, email. - Security emails / SMS about login, password or email change
Shows the hack and its timing; often has a "secure account" link. Where: Email inbox, spam folder.
You may also need, depending on your answers
- Messages sent from your account to others — Shows what the hacker did in your name.
- Warn your contacts not to send money or OTPs — Hackers target your friends next.
- Complaint on cybercrime.gov.in (and 1930 if money was lost) — Needed if recovery fails or money was taken.
What the law says
Hacking and identity theft are offences under the IT Act. Report on cybercrime.gov.in; for money lost call 1930. Platforms must act quickly on impersonation complaints under the IT Rules.
General information, not legal advice.
Saboot will also ask
- Is the account being used to ask people for money or post things?
- Did you lose any money?
Similar situations
- Instagram account hacked
- WhatsApp hacked and asking my contacts for money
- Facebook hacked and posting bad things
- Fake account using my name and photos
- Our office computers were locked by ransomware
Sources
- IT (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2026 — G.S.R. 120(E), in force 20 Feb 2026 (intimate-image complaints: action within 2 hours)
- National Cyber Crime Reporting Portal (MHA)
The full guide: My Instagram, WhatsApp, email or gaming account was hacked, or someone made a fake profile of me · All situations

Open Saboot