Account takeovers are now one of the most common cyber problems people in Kerala and across India face. A friend messages “send me the 6-digit code I sent by mistake”, a fake “copyright violation” email asks you to log in, or a stranger on Instagram offers a “verified badge”. Minutes later the account is gone – and the attacker is asking your contacts for money. Here is exactly what to do.
First 10 minutes: for any hacked account
- Tell family and friends by phone or another app: “My account is hacked – don't send money or codes.”
- Change the password of the email account linked to the hacked account, from a device you trust
- If money was involved, call the national cyber-crime helpline 1930 and report at cybercrime.gov.in
- Take screenshots of messages, profile changes and demands – evidence matters
WhatsApp hacked
- Re-register your number: open WhatsApp on your phone, verify your number and enter the 6-digit SMS code. This logs the attacker out of that device.
- If asked for a two-step verification PIN you don't know (the attacker set one), you will need to wait for WhatsApp's reset period before you can re-register without the PIN. Keep the account warning your contacts meanwhile.
- Check linked devices: Settings → Linked devices, and log out any you don't recognise.
- Turn on two-step verification with your own PIN and an email address.
Instagram hacked
- Check your email for a message from Instagram about a changed email or password – it often contains a link to reverse the change.
- Use Instagram's official help page for hacked accounts (instagram.com/hacked) and follow the steps; you may be asked for a video selfie to confirm your identity.
- Once back in: change the password, review Security → Login activity, remove unknown devices and apps, and turn on two-factor authentication.
Facebook hacked
- Go to facebook.com/hacked from a trusted device and follow the recovery steps.
- Check “Where you're logged in” and log out of all unknown sessions.
- Review recent posts, messages and ads the attacker may have created, and check any Pages or ad accounts you manage.
- Turn on two-factor authentication and set up login alerts.
How accounts usually get stolen
| Trick | What it looks like | Protection |
|---|---|---|
| OTP request | “I sent you a code by mistake, please forward it” | Never share any verification code |
| Fake login page | Copyright, verification or “blue tick” messages with a link | Log in only through the app itself |
| Reused password | A password leaked from another website | Unique passwords and a password manager |
| Malicious app or APK | “Download this app to claim your reward” | Install apps only from official stores |
Lock it down for good
- Two-step / two-factor authentication on WhatsApp, Instagram, Facebook and your email
- A different strong password for every account, stored in a password manager
- Recovery email and phone number kept up to date
- Regular check of logged-in devices and connected apps
Need help? Our personal cyber security services team in Kochi guides you through recovery, checks your phone and secures your accounts. See also how to protect your phone from hacking.
Frequently asked questions
Can someone recover my account for a fee?
Only the platform can restore an account. Legitimate experts guide you through the official process; anyone promising to “hack it back” for money is very likely a scammer.
Should I file a police complaint?
Yes, if money was lost, you are being blackmailed or impersonated, or your account is used to cheat others. Report at cybercrime.gov.in or call 1930.
Will deleting and reinstalling the app fix it?
No. Reinstalling does not remove the attacker's access. Follow the recovery steps and log out unknown devices.
