Discovering that your Facebook account has been hacked and used to send scam messages to your friends and family is one of the most violating online experiences a person can face. The shock often comes with fear that relationships will be damaged, money may have already been lost, and your digital identity has been weaponized. This happens frequently in the Philippines, where hackers exploit trusted connections to run “friend in need,” emergency, or investment scams. You can regain control of your account, stop the damage, protect your contacts, and involve Philippine authorities to investigate the crime. This guide provides clear, practical steps grounded in Meta’s recovery process and the procedures that actually work under Philippine law.

What Legally Happened to Your Account

When someone gains unauthorized access to your Facebook account, changes the password, email, or phone number, and then uses your profile, photos, and friend list to deceive others, two main cybercrimes typically occur under Republic Act No. 10175, the Cybercrime Prevention Act of 2012.

The initial breach is illegal access under Section 4(a)(1). The subsequent use of your identifying information—your name, picture, personal details, and social connections—to impersonate you and solicit money or information is computer-related identity theft under Section 4(b)(3).

If the hacker successfully defrauded your contacts of money through deceit, that conduct can also constitute estafa (swindling) under Article 315 of the Revised Penal Code. Because the crime was committed through information and communications technology, Section 6 of RA 10175 increases the penalty by one degree. Philippine courts have jurisdiction under Section 21 of RA 10175 when any element of the offense occurred in the Philippines, a computer system located here was used, or damage was caused to a person in the country—even if the hacker is physically abroad.

You are the victim of these crimes. The hacker, not you, is criminally liable. Prompt action on your part creates an official record that protects you and helps your affected contacts.

Step-by-Step: Regaining Control of Your Hacked Facebook Account

Act as quickly as possible. The longer the hacker controls the account, the more messages they can send and the harder recovery becomes.

Start with Meta’s official hacked account tool. Go directly to facebook.com/hacked on a device or browser you have used to log into Facebook before. This increases the chance that Meta’s systems recognize you as the legitimate owner. Follow the prompts exactly. The process usually includes confirming recent suspicious activity, securing the account, changing the password, and logging out active sessions on other devices.
If you cannot access the original email or phone number (the most common situation after a takeover), continue through the same hacked flow or the login help options. Meta offers several verification paths:
- Use “Trusted Contacts” if you previously set up three to five friends who can receive codes to help you regain access.
- Upload a clear, well-lit photo of a government-issued ID that matches the name and photo on your profile. Accepted IDs commonly include a Philippine passport, driver’s license, UMID, or PhilID. Meta uses this for identity verification in many compromised-account cases.
- Provide any other requested details about your account history or connections when prompted.
Recovery time varies from minutes to several days. Check your email (including spam/junk folders) and the Facebook app or website regularly for updates from Meta. Acting within the first few hours improves your chances.
Once you regain access, secure the account immediately. Change the password to a strong, unique one you have never used elsewhere. Turn on two-factor authentication using an authenticator app rather than SMS. Go to Settings > Security and Login, review all active sessions and logged-in devices, and log out anything unfamiliar. Remove suspicious apps connected to the account. Update your privacy settings and review recent posts or messages the hacker may have sent or received.
Report the compromise to Meta through the options provided during the recovery flow or via the Help Center. This creates an internal record and can trigger additional security reviews.

If recovery fails after multiple attempts, a formal police report (discussed below) can support further appeals or data-preservation requests to Meta under Sections 13–15 of RA 10175.

Warn Your Contacts Immediately to Limit Damage

Do not wait until you fully recover the account. Use every other channel you have—Viber groups, WhatsApp, SMS, email lists, Instagram, or a trusted family member’s account—to send a clear, calm message right away.

A good message includes:

The exact date and approximate time you discovered the hack.
A statement that any messages asking for money, gift cards, emergency help, or personal information are fraudulent.
Clear advice: “Do not send anything. Do not click links. Contact me through this number or another channel instead.”
Mention that you have reported the incident to Philippine authorities.

Send this to group chats, individual close contacts, and anyone likely to have received messages. Ask family members to share it further if needed. This step protects relationships and prevents additional financial losses. Keep screenshots of your warning messages as part of your evidence.

Preserve Evidence Before and After Recovery

Evidence is critical for Meta, authorities, and protecting yourself from any misunderstanding with contacts.

Take full-screen screenshots showing dates, times, profile URLs, user IDs, suspicious messages or posts, notifications from Facebook about password or email changes, and any transaction references (GCash, bank, etc.). Create a simple written timeline: when you last had normal access, when problems started, when you discovered the scam messages, and every step you took afterward.

Do not delete anything from the account once you regain access. Print or save digital copies in multiple places. Under the Supreme Court’s Rules on Electronic Evidence (A.M. No. 01-7-01-SC), properly timestamped and authenticated printouts and digital files are admissible in court.

Reporting to Philippine Authorities

Filing an official report serves several practical purposes: it creates a dated public record that you were the victim of hacking, supports your explanations to friends and family, enables authorities to issue preservation orders to Meta for traffic data and content, and starts the process of identifying and holding the perpetrator accountable. Many people begin with a quick blotter entry at their local police station for an immediate official record, then proceed to specialized cybercrime units.

Recommended agencies:

Philippine National Police Anti-Cybercrime Group (PNP-ACG) — Primary agency for most social-media hacking and scam cases. Headquarters at Camp Crame, Quezon City, with regional units nationwide. Hotline: (02) 8723-0401 local 7491 or 7483; Viber/Smart: 0961-829-8083. Email or check verified channels for current submission options.
National Bureau of Investigation Cybercrime Division (NBI-CCD) — Handles more complex or higher-value cases. Main office on Taft Avenue, Manila, with regional offices.
Cybercrime Investigation and Coordinating Center (CICC) — Hotline 1326 for initial guidance or triage on cyber incidents.

What to bring for a formal complaint:

At least two valid government-issued photo IDs.
Printed or digital evidence bundle (screenshots with visible timestamps, timeline, Facebook notifications, any transaction records).
A written chronological narrative of events.
For a sworn statement or complaint-affidavit, visit any notary public (quick and inexpensive).

Authorities may ask you to execute a sworn statement. They can coordinate with Meta for data preservation. Investigations typically take weeks to several months depending on complexity and whether financial trails (GCash, banks) can be traced. If your contacts lost money, encourage them to file their own complaints—they can reference your report.

For overseas Filipino workers or foreigners: You can report via hotline, email, or through the nearest Philippine embassy or consulate. Affidavits executed abroad may require apostille under the Apostille Convention for use in Philippine proceedings. Jurisdiction still applies if damage occurred to persons or systems in the Philippines.

Common Pitfalls and Challenges

Many people delay reporting while trying to recover the account alone, which weakens evidence trails. Others fall for paid “Facebook recovery services” that are themselves scams. Deleting messages or posts in panic destroys valuable proof. Friends who lost money may initially blame you—your prompt warning and police report usually resolve this.

For users abroad, time zone differences can slow Meta responses; prepare evidence in advance and follow up persistently. Hackers frequently change recovery details and enable their own two-factor authentication, making ID upload or trusted contacts essential.

Frequently Asked Questions

How long does it usually take to recover a hacked Facebook account?
It depends on verification needs. Simple cases resolve in minutes to a few hours. When the hacker changed email and phone, providing a government ID or using trusted contacts often succeeds within one to three days if you act quickly.

Can I upload my Philippine ID (passport, driver’s license, UMID, or PhilID) to recover my account?
Yes. Meta accepts clear photos of these government-issued IDs during the hacked-account verification process for many users in the Philippines and elsewhere.

What if my friends already sent money because of messages from the hacked account?
Advise them to contact their bank, GCash, Maya, or other e-wallet provider immediately with screenshots of the messages and your warning or police report. They can also file their own estafa or cybercrime complaint with PNP-ACG or NBI. Your official report helps establish that the transactions were unauthorized.

Do I need a police report to get my Facebook account back?
Meta’s recovery process does not strictly require one. However, a police or NBI report is strongly recommended when scams occurred. It creates an official record, supports data-preservation requests to Meta under RA 10175, and protects you when explaining the situation to contacts or institutions.

Can the hacker be prosecuted even if they are outside the Philippines?
Yes. RA 10175 Section 21 gives Philippine courts jurisdiction when any element of the offense (illegal access, identity theft, or resulting estafa) occurred in the Philippines or caused damage here. Authorities can pursue international cooperation in appropriate cases.

Will I be held liable for money scammed from my friends?
Generally no, if you can demonstrate through evidence and official reports that the access and use were unauthorized. Prompt reporting and notification of contacts strengthen your position as a victim rather than a participant.

How should I choose between PNP-ACG and NBI for reporting?
Both handle these cases effectively. Many people start with PNP-ACG because of its regional presence and focus on social-media incidents. NBI is often used for more complex investigations. You can also call the CICC hotline 1326 for guidance on where to file first.

If I am abroad, how do I report this effectively?
Use the hotlines or email channels of PNP-ACG or NBI. Coordinate with the nearest Philippine embassy or consulate for help preparing or authenticating documents. Digital evidence (screenshots, timelines) can be submitted electronically in most cases. Act as quickly as time zones allow.

What is the most important evidence to prepare?
Timestamped screenshots of suspicious activity, Facebook notifications about changes to your account, the exact messages the hacker sent, your warning messages to contacts, and a clear written timeline. Print or back up everything.

Key Takeaways

Start recovery immediately at facebook.com/hacked and use government ID verification or trusted contacts if email and phone access are lost.
Warn your contacts the same day through alternative channels with a clear, factual message that stops further harm and protects relationships.
Preserve every screenshot and create a detailed timeline before deleting or altering anything.
File an official report—begin with a local police blotter then proceed to PNP-ACG or NBI—to create a formal record, enable data preservation from Meta, and support investigation.
After recovery, fully secure the account with a strong unique password and app-based two-factor authentication.
You are the victim. Unauthorized access and misuse of your account are serious crimes under RA 10175 (illegal access and computer-related identity theft), and any resulting fraud carries increased penalties when committed through ICT.
Prompt, documented action helps authorities, protects your reputation, and gives your affected friends the evidence they need to seek their own remedies.

Taking these steps restores control and turns a painful violation into a documented case that Philippine law enforcement can act on. Many people successfully recover their accounts and limit the fallout by moving quickly and methodically.