Recovery

Recover an Instagram Account After the Phone Number Was Changed by a Hacker

A hacker swapped the phone number on your account? Use the hacked-account support flow and identity verification to regain access without it.

Swapping your phone number lets an attacker capture SMS two-factor codes and block your texts-based recovery. The way around it is to stop relying on the phone entirely and prove your identity directly through Instagram’s hacked-account flow.

If your situation is actually …

Recover past a changed phone

Stage 1 · Stabilize

Secure your other contacts

  1. Make sure your recovery email account is yours and locked down.
    It’s the channel Instagram uses to send recovery instructions.
Stage 2 · Diagnose

Enter the hacked-account flow

  1. Use "Need more help?" → "My account was hacked" and indicate the phone number was changed.
    Where: Instagram login → Need more help?
Stage 3 · Reclaim

Verify identity

  1. Complete the video selfie or ID step and supply a contact you control.
    Where: Instagram identity verification
Stage 4 · Harden

Move off SMS two-factor

  1. Switch two-factor to an authenticator app, add a current phone, and save backup codes offline.
    SIM-swap and number changes are exactly why authenticator apps are safer than SMS.
    Where: Settings → Accounts Center → Password and security → Two-factor authentication
If this flow does not restore access: Report the account as hacked

Frequently asked questions

Yes. The "My account was hacked" identity flow doesn’t depend on the phone number. Verify with a video selfie or ID and have the result sent to an email you control.

Delvia

Access issues are easier to prevent when roles, owners, and responsibilities are recorded clearly

Most access problems trace back to the same gap — no clear record of who has access, what role they hold, and what should happen when that changes. Delvia helps you keep that record so problems are visible before they become incidents.

Delvia is free on iPhone and Android. Keep a clear record of who has access to your accounts — and what to do when that changes — wherever you are.