4 warning signs that your Facebook account may have been hacked.
Unable to log in, seeing strange devices appearing, or friends constantly receiving unusual messages from your account? These could be signs that your Facebook account has been hacked and taken over by hackers.
As the world's largest social network, Facebook has become an attractive target for cyberattackers due to its enormous user base. According to Meta, as of March 2026, an average of 3.56 billion people use at least one of Facebook, Instagram, Messenger, or WhatsApp platforms every day.
Once hackers gain access to a Facebook account, they can spread malicious links, scam the victim's relatives, steal identity, or continue attacking other accounts if the user uses the same password for multiple services.
Although Facebook has integrated many security features such as two-factor authentication (2FA), Security Checkup, and unusual login alerts, users still need to proactively monitor for unusual signs to protect their accounts in a timely manner.
Here are four signs that your Facebook account may have been hacked and taken over by a hacker.
1. Unable to log in or account information has been changed.
The most obvious sign is that you can no longer log in to Facebook even though you've entered the correct information.
If you can still access your account, check if your profile picture, name, date of birth, email address, or phone number associated with the account has been changed. In particular, if your recovery email address has been replaced without your consent, it's highly likely your account has been compromised.
In that case, hackers can change passwords, lock out the owner's access, and use the account to post fraudulent content, spread malicious links, or impersonate the owner to commit fraud.
2. Friends receive messages or posts that you didn't send.
Many people only discover their accounts have been hacked when family or friends call to ask about strange messages, posts, or friend requests.
If friends tell you they've received messages asking for loans, urgent transfers, giveaway promotions, or suspicious links from your account, check immediately.
Hacked accounts are often exploited to spread spam, commit financial fraud, or trick recipients into clicking on fake links to steal more personal information.
3. Facebook sends alerts about unusual logins.
One of the most reliable signs is when Facebook itself sends an email or notification about login activity from an unfamiliar device or location.
If login alerts are enabled, Facebook will notify you when it detects your account being accessed from a device you've never used before or from an unusual location.
In this case, users should access the Passwords and Security section to check the list of logged-in devices and verify if any login sessions were initiated by them.
4. Fake Facebook accounts bearing your name appear.
Not every case involves a directly compromised account.
Many scammers create a new Facebook account, copying your profile picture, name, and other public information to impersonate you. They then send friend requests to your friends and exploit their trust to message you asking for money or sending fraudulent links.
If your friends notify you that they've received new friend requests from you, even though your old account is still active, it's highly likely you've become a victim of Facebook account cloning.
If you can still log into Facebook, checking is quite simple. Users access the system.Settings & Privacy→Setting→Passwords and security→Where you log in.
Here, Facebook will display all the devices and locations currently logged into your account. If you see a phone, computer, or location you don't recognize, it's highly likely your account has been accessed without authorization.
What should you do if you discover your Facebook account has been hacked?
If you still have access to your account, immediately log out of all unfamiliar devices, then change your password to a new, strong one that is completely different from your old one.
If you are unable to log in, you should use the "Forgot Password" feature or access Facebook's account recovery support page to regain control.
After successfully recovering your account, inform your friends and family about the compromised account so they can be aware of any unusual messages or transactions sent during that time.
How to protect your Facebook account from hackers
To reduce the risk of account compromise, security experts recommend that users:
- Use a strong, unique password for Facebook and do not share it with other services.
- Enable two-factor authentication (2FA) to add an extra layer of protection when logging in.
- Please provide your complete account recovery email address and phone number.
- Set privacy settings appropriately, only sharing information with friends.
- Do not click on suspicious links or log in from websites of unknown origin.
Be cautious of friend requests from strangers or accounts that appear to be fake.
Never share your password or verification code with anyone, even if they claim to be a Facebook employee.
Early detection and timely handling of unusual signs can help users reduce the risk of losing control of their accounts and prevent scams targeting friends and family through their Facebook accounts.
