Facebook Account Gets Hacked
It usually starts on a completely random morning. You wake up in your house in Awka, thinking about what to do with your weekend, maybe looking forward to a proper plate of okro soup and garri later in the afternoon. You pick up your phone to do your usual morning scroll, open Facebook, and you’re staring at a blank login screen.
That’s weird, you think. You type in your password. Incorrect password. You type it again, slower this time, making sure your fingers don’t slip on the keyboard. Still incorrect.
By the time you open your Gmail or Yahoo mail and see that notification from Meta saying “Your primary email address was successfully changed,” reality hits you like a physical blow. Your stomach drops. Your photos, your years of private chats, and maybe even the business page you’ve spent years building to feed your family are suddenly gone, sitting in the hands of some faceless scammer.
If you are dealing with this right now, or trying to rescue a relative’s profile, stop panicking. Don’t rush to open a new account out of frustration, and definitely don’t start crying. Let’s walk through exactly how to drag your account back from the thief, using real, practical steps that actually work here in Nigeria.
The First Line of Defense (Do This Immediately)
When a hacker takes over an account, they are usually in a race against time to change everything before you notice. You need to act just as fast.
The very first thing you should do is go back to that email notification you received about the password or email change. Meta always leaves a small back door open for the real owner. Inside that email, look closely for a link that says “This wasn’t me” or “Secure your account.” If you click that link within a few hours of the hack, Facebook’s security system realizes a robbery is in progress. It will often freeze the hacker out on the spot and let you reverse the email change immediately.
If you don’t see that email, or if you’re reading this days after the hack happened, open your browser and type facebook.com/hacked directly into the address bar. Don’t just search for it on Google because you might click on a phishing ad. On that official page, click “My Account Is Compromised” and type in your old details. The system will ask for the last password you can remember. Type it in. Forcing the system to recognize your old password is one of the easiest ways to prove you are the rightful owner.
What If They Changed Your Email and Phone Number Completely?
This is the exact point where most Nigerians just give up and lose hope. You try to search for your account using your MTN or Airtel number, or your regular Gmail, and Facebook keeps telling you “No account found” because the hacker has already wiped your details and put their own.
You can bypass this completely using a small trick.
Find a trusted friend—let’s say your guy, Chinedu, who lives down the road in Onitsha. Tell him to open his own Facebook app, search for your stolen profile, and click the three dots right under your profile picture. He needs to select “Copy link to profile.”
When he sends that link to you on WhatsApp, look at the very end of it. You’ll see either your name with some numbers (like janet.obasi.5) or a long string of random digits. That is your unique Facebook Username ID. Copy that exact text, go back to the facebook.com/hacked page, and paste it into the search box. Boom—Facebook will find your account instantly, even if the hacker changed everything else.
Once your profile pops up, Facebook will offer to send a reset code to the email on file. Since that email belongs to the thief, look underneath that button for a tiny link that says “No longer have access to these?” or “Try another way.”
When you click that, Facebook realizes you’ve been completely locked out. If you are using a phone or browser that you’ve used to log into Facebook in the past, Meta’s updated security system will recognize your device. This makes a huge difference. Instead of looping you in circles, it will ask you to provide a brand-new email address that has never been linked to Facebook before. Type it in, get the confirmation code from your new mail, and then prepare for the identity check.
To get your account back at this stage, you will need to upload a clear photo of your government ID. Facebook is quite strict about this now, but they accept the Nigerian NIN slip or card, a valid Driver’s License, a Voters Card (PVC), or an International Passport.
Here is the catch: the name on your ID must match the name on your Facebook profile. If your Facebook name is “Sexy Princess” or some nickname, this stage will be incredibly difficult. But if the names align, find a well-lit room, take a very sharp photo of your ID without any camera flash glare, and upload it.
Alternatively, if you are doing this through the mobile app, Meta might offer you a video selfie option instead of an ID upload. If that option pops up, take it. You’ll just need to hold your phone up and follow a circle on the screen with your eyes. Meta’s automated system will instantly scan your face and match it against the old photos and videos on your profile. A human being or a specialized security bot at Meta will review the data, and within 24 to 72 hours, they will send a direct login link to your new email.
Locking It Down So It Never Happens Again
Once you finally get that sweet notification and log back in, do not just sigh with relief and go to sleep. You need to clean house immediately.
First, change your password to something incredibly strong. Stop using your birthday, your pet’s name, or common street slang like GodAbeg2026. Use a mixture of capital letters, small letters, numbers, and symbols that make absolutely no sense to anyone but you.
Next, head straight into your account settings and look for the tab that says “Where You’re Logged In.” You will likely see a list of phones and locations. If you see an unknown device browsing your account from Lagos or London while you are sitting comfortably in Anambra, hit “Log out of all devices.” This instantly kicks the hacker off their phone.
Lastly, you must turn on Two-Factor Authentication (2FA). Do not use the SMS option if you can avoid it, because SIM-swapping scams are very real in Nigeria right now. Instead, download a free app like Google Authenticator from the Play Store. Link it to your Facebook so that every single time someone tries to log in from a new device, they will need a shifting 6-digit code that only exists on your physical phone.
A Serious Warning About Online “Helpers”
Let’s talk about the biggest trap people fall into when they are desperate. The moment you go on Twitter (X), Instagram, or Nairaland to complain that your account was hacked, your comments will be flooded by accounts telling you to contact some “expert hacker” on Instagram or WhatsApp who magically recovers accounts for a small fee.
Please, save your hard-earned money. Every single one of those comments is a scam.
Nobody in Nigeria, no matter how good they claim to be with computers, can hack into Meta’s global servers to pull out your password. These guys are just standard format boys who will take your Naira, tell you stories about “buying recovery software,” demand more money, and then block you the moment your wallet is empty.
Only Meta has the keys to your account. Stick to the official steps, be patient with the identity verification process, and you’ll get your profile back without losing a single kobo to internet fraudsters.
