Your Social Media Account Has Been Hacked: What to Do Next in India
Social media hacking is one of the most common cyber crimes in India. Once a hacker gains access, they can impersonate you, scam your contacts, post harmful content, or commit financial fraud using your identity. Quick action limits the damage.
Signs Your Account Has Been Hacked
-
Unexpected password change or logout
-
Messages or posts you didn't send or create
-
Contacts receiving suspicious links from your account
-
Login alerts from unfamiliar devices or locations
-
Linked email or phone number changed without your knowledge
Immediate Steps: The First 30 Minutes
Try account recovery. Use 'Forgot Password' via your registered mobile or email. Most platforms (Instagram, Facebook, WhatsApp, X) have a dedicated account recovery flow
Secure your linked email first. Hackers often access your social media through your email. Change your email password and enable 2-factor authentication
Log out of all active sessions. Most platforms allow this under Security Settings. Do it immediately.
Enable 2-factor authentication (2FA). Once you regain access, turn on 2FA using an authenticator app
Alert your contacts. Warn friends and followers not to respond to any messages or links sent from your account during the breach.
How to Report the Hack
Report to the Platform
All major platforms have an 'Account Compromised' or 'Report Hacked Account' option in their Help Centre. Submit this with your identity proof if required. This protects you from liability for content posted by the hacker.
File a Complaint on cybercrime.gov.in
If your account was used for fraud, blackmail, or spreading harmful content, file a formal complaint on the National Cyber Crime Reporting Portal. Select the 'Social Media' or 'Cyber Stalking / Bullying' category as appropriate.
Call 1930
If there has been any financial loss — for example, the hacker messaged your contacts asking for money — call 1930 immediately to initiate bank coordination.
File an FIR
In serious cases — identity theft, financial fraud, blackmail, or defamatory content posted — file an FIR at a Cyber Crime Police Station. Hacking is a cognisable offence under Section 66 of the IT Act.
Legal Protection Available
IT Act, 2000 (Section 66): Unauthorised access to a computer system — up to 3 years imprisonment.
IT Act (Section 66C/D): Identity theft and impersonation using computer resources — up to 3 years.
BNS, 2023: Criminal intimidation, defamation, and cheating committed through digital means are prosecutable.
Evidence to Preserve
-
Screenshots of unauthorised posts, messages, and changed account details
-
Login activity logs (available in most platform security settings)
-
Messages sent from your account without your knowledge
-
Any communications from the hacker
Has your social media account been hacked and misused for fraud or impersonation? Our cyber law team helps you file complaints, send legal notices, and pursue criminal action against hackers.
Frequently Asked Questions
The platform has not responded to my recovery request. What next? Escalate through the platform's official support channels. If the account is being used for fraud, an FIR can compel the platform to cooperate under court order.
Can I be held liable for what the hacker posted from my account? Generally no, if you can prove the account was compromised and report it promptly. This is why filing a complaint quickly is important.
My WhatsApp was hacked and contacts were asked for money. What should I do? Immediately inform all contacts. Call 1930. File on cybercrime.gov.in. If any money was transferred, banks can be asked to reverse the transaction.
