Last updated · reviewed by the Essentras editorial team

Agent recipe

“My Instagram account was hacked and the email and phone were changed. Which service can recover it, and what does it cost?”

The agent asks only what happened and returns Instagram’s official route: the free identity check at instagram.com/hacked, which exists even when the email and phone were changed. The $6,500 service comes second, and the API states no payment or refund terms for it.

Responses captured 19 Oct 2026. Prices change, so the agent must re-quote before it shows a total.

Tools usedcheck_instagram_recovery_pathquote_service

Connect the MCP server or REST API first: no account, no key. Rules: agent briefing.

The steps

  1. Ask what happened, never the handle

    The checker takes 1 answer, the situation, and never the handle, email, phone, password or a code. An account whose password, email or phone someone else changed is hacked.

    MCP tool call: check_instagram_recovery_path
    {
      "situation": "hacked"
    }
    Same call over REST
    curl -X POST https://essentras.com/api/agent/v1/check/instagram-recovery-path \
      -H 'Content-Type: application/json' \
      -d '{"situation":"hacked"}'
    Real response, trimmed. Captured 19 Oct 2026
    {
      "checked": "2026-10-15",
      "status": "complete",
      "situation": {
        "id": "hacked",
        "label": "Hacked (password, email, or phone changed by someone else)"
      },
      "route": {
        "official": "Owner-identity verification through instagram.com/hacked. You complete the identity steps; we prepare, coach, review and track the case with you.",
        "note": "Instagram has an official route even when the attacker changed the email and phone: an identity check. Meta publishes no success rate or review time."
      },
      "do_it_yourself": {
        "summary": "Meta's own recovery flow is free, and you should always try it first.",
        "first_step": "The hacked-account flow at instagram.com/hacked, then the identity check Instagram asks for",
        "official_links": [
          {
            "title": "Instagram’s hacked-account flow (instagram.com/hacked)",
            "url": "https://www.instagram.com/hacked/"
          },
          {
            "title": "If you think your Instagram profile has been hacked",
            "url": "https://help.instagram.com/149494825257596"
          },
          {
            "title": "Why you might be asked to upload a video selfie to confirm your identity on Instagram",
            "url": "https://help.instagram.com/1053588012132894"
          }
        ]
      },
      "timeline": "Meta also publishes no review time for account recovery or appeals on the Instagram and Meta pages we checked on 15 October 2026, so treat any exact timeline you are quoted as unreliable.",
      "decides": "Meta makes the final decision, so nobody can promise a recovery or a timeline.",
      "never": "Legitimate owners only, through Meta’s official channels: no hacking, no access to anyone else’s account, and nobody should ever ask for the password or a login code."
    }

    What to read: route.note: Instagram has an official route even when the attacker changed the email and phone, an identity check, and the owner completes it. Meta publishes no success rate or review time.

  2. If the old email and phone are gone too

    When the owner cannot reach the email or phone used at sign-up either, the situation is noemailphone. Meta’s own page sets a limit there, and the checker says so.

    MCP tool call: check_instagram_recovery_path
    {
      "situation": "noemailphone"
    }
    Same call over REST
    curl -X POST https://essentras.com/api/agent/v1/check/instagram-recovery-path \
      -H 'Content-Type: application/json' \
      -d '{"situation":"noemailphone"}'
    Real response, trimmed. Captured 19 Oct 2026
    {
      "summary": "Cannot access the old email or phone number. Identity check at instagram.com/hacked: a video selfie if the account has photos of you, otherwise the email or phone used at sign-up and device details.",
      "route": {
        "official": "Identity check at instagram.com/hacked: a video selfie if the account has photos of you, otherwise the email or phone used at sign-up and device details.",
        "note": "Meta does not promise access without the registered email or phone; its help page says it cannot give access if you lost that email and never linked Facebook. The identity check is the route to try."
      },
      "scam_signs": [
        "Calls itself an \"ethical hacker\" or offers to \"hack back\" your account. Real recovery never involves hacking.",
        "Claims a private \"insider\" line to Meta or Instagram employees. No legitimate service has one.",
        "Guarantees recovery, a 100% success rate, or a fixed time like \"back in 1 hour.\"",
        "Demands full payment upfront, especially by crypto, Zelle, or Cash App, before any work.",
        "Reaches out to you first in Instagram DMs, WhatsApp, or Telegram offering to recover accounts.",
        "Asks for your password or 2FA codes. A legitimate consultancy guides YOU through Meta's own flow; it never needs your password."
      ]
    }

    What to read: route.note: Meta does not promise access without the registered email or phone, and the identity check is the route to try. scam_signs lists what a fake recovery service does, the same in every situation.

  3. Price the service, terms as returnedService step

    For a valuable account, or after the free route has failed, quote_service returns the price, who decides and start_url. terms is null: the API states no payment or refund terms, so the agent quotes none.

    MCP tool call: quote_service
    {
      "id": "instagram-hacked-account-recovery"
    }
    Same call over REST
    curl https://essentras.com/api/agent/v1/services/instagram-hacked-account-recovery
    Real response, trimmed. Captured 19 Oct 2026
    {
      "id": "instagram-hacked-account-recovery",
      "name": "Instagram account recovery",
      "start_url": "https://essentras.com/services/instagram-hacked-account-recovery/start?utm_source=ai_agent&utm_medium=agent_api&utm_content=quote_service",
      "price": {"amount": 6500, "label": "$6,500", "basis": "flat"},
      "options": [],
      "terms": null,
      "decides": "Meta decides.",
      "free_check": {"mcp_tool": "check_instagram_recovery_path"},
      "how_to_buy": "start_url is the page where the buyer reviews the service and pays. The agent never pays."
    }

    What to read: price.label is $6,500, and decides: “Meta decides.” The checker’s note on the same service: it is for valuable accounts or cases where the do-it-yourself path has already failed, through Meta’s official channels only.

The 2 situations, as the checker returned them

What the agent readsHackedOld email and phone unreachable
Official routeOwner-identity verification through instagram.com/hacked. You complete the identity steps; we prepare, coach, review and track the case with you.Identity check at instagram.com/hacked: a video selfie if the account has photos of you, otherwise the email or phone used at sign-up and device details.
Meta’s positionInstagram has an official route even when the attacker changed the email and phone: an identity check. Meta publishes no success rate or review time.Meta does not promise access without the registered email or phone; its help page says it cannot give access if you lost that email and never linked Facebook. The identity check is the route to try.
Who decidesMeta makes the final decision, so nobody can promise a recovery or a timeline.Meta makes the final decision, so nobody can promise a recovery or a timeline.
Service returned$6,500, terms not stated$6,500, terms not stated

What the agent tells the buyer

Start with Instagram’s own flow, which is free: go to instagram.com/hacked and complete the identity check it asks for, a video selfie if the account has photos of you. Instagram has an official route even when the attacker changed the email and phone.

Meta makes the final decision and publishes no review time, so nobody can promise a recovery or a date. Essentras read Meta’s pages on 15 Oct 2026: treat any exact timeline you are quoted as unreliable.

Never give anyone your password or a login code. Walk away from anyone who calls themselves an ethical hacker, claims a private line to Meta, guarantees recovery or a fixed time, or contacts you first offering to help.

If the free route fails, or the account is too valuable to risk, Essentras’s recovery service is $6,500, worked through Meta’s official channels only. The API states no payment or refund terms for it, so read them on the start page and ask Essentras in writing before you pay.

I will not touch the account or any code: you complete the identity steps yourself.

The human step

The owner runs instagram.com/hacked first, for free. Only if they want help, they open start_url, read the terms there and pay on essentras.com. The agent never asks for the handle, the password or a code.

start_url, returned by quote_service
https://essentras.com/services/instagram-hacked-account-recovery/start?utm_source=ai_agent&utm_medium=agent_api&utm_content=quote_service

Also useful

Rules the agent follows

  • Never pays and never collects card data. The job ends at start_url, after the official flow.
  • Asks only what happened: never the handle, email, phone, password or a code.
  • Official channels only: Meta’s own flow first, no hacking and no access to anyone’s account.
  • Promises no recovery and no date: Meta decides.
  • Shows payment and refund terms only as the API returns them; null means not stated.
  • Never suggests placements as a route to Wikipedia notability or a Meta verified badge.

FAQ

Questions about this recipe

Can anyone recover a hacked Instagram account for me?▾

Only through Meta’s official channels, and only with you: the owner completes the identity steps. Meta makes the final decision, so nobody can promise a recovery.

How long does recovery take?▾

Meta publishes no review time for account recovery or appeals on the pages Essentras checked on 15 Oct 2026, so treat any exact timeline you are quoted as unreliable.

What does the service cost, and what if it fails?▾

$6,500. The API states no payment or refund terms for it (terms is null), so the agent quotes none: read them on the start page and ask Essentras in writing before paying.

How do I spot a recovery scam?▾

The checker lists the signs: a self-styled ethical hacker, a claimed insider line to Meta, a guaranteed recovery or a fixed time, a demand for full payment upfront before any work, especially by crypto or a payment app, an unsolicited message offering help, and any request for your password or codes.