In the next hour
- Change your Facebook password from a device you trust.
- Sign out of all other sessions in Password and security.
- Check that two-factor authentication still uses your phone or app, and remove anything you do not recognise.
- Check the email and phone number on the profile.
- Open your business portfolio and remove people, partners or apps you did not add.
Then check the ad accounts
- Payment methods: remove any you did not add.
- Ads: pause anything you did not create.
- Spending limits: set one if it helps contain damage.
- Admins: make sure you and one trusted backup admin are the only ones with full control.
If you are already locked out
Use Meta's hacked account page from the login screen and follow the steps there. Our hacked ad account steps cover what to do once you are back in.
How the scam usually looks
The caller or sender says they are from Meta Business Support, mentions a problem with your ads or a verification, and asks you to read out a code that was just sent to you. That code lets them into your account. A real Meta notice lives inside Business Support Home, not on a phone call.
Official sources
- Facebook: hacked or compromised account
- Recover a hacked or compromised business portfolio (Meta Business Help Center)
- Troubleshoot unrecognized activity on your ad account (Meta Business Help Center)
Meta changes its help pages, menus and forms often. Follow the wording on your own screen and the current Help Center. Restore Ad Account is an independent service and is not affiliated with Meta.