Type of cyber crime
Social media & account hacking
Your WhatsApp, Instagram, Facebook, email or X account taken over, or a fake profile created in your name to cheat your contacts.
Account takeovers usually start with a "verification code" the victim is tricked into sharing, a reused password from an old leak, or a malicious link. Once inside, attackers message contacts for "urgent" money, post investment ads, or lock the owner out and demand payment. Impersonation profiles do the same without ever touching your account.
How it usually looks
- A friend forwards a WhatsApp code and asks you to send it back; your WhatsApp moves to their phone.
- Your Instagram now posts crypto-trading screenshots and your recovery email has changed.
- A Facebook profile with your name and photos asks your relatives for hospital money.
Law that applies
| Provision | What it covers | Punishment |
|---|---|---|
| IT Act 2000 s.43 / s.66 | Unauthorised access to a computer resource | Compensation; up to 3 years and fine |
| IT Act 2000 s.66C / s.66D | Identity theft; cheating by personation | Up to 3 years and fine |
| BNS 2023 s.319 | Cheating by personation | Up to 5 years and/or fine |
Sections are quoted for orientation; the police decide the final charge sheet. Verify text at indiacode.nic.in.
Where to report
- Use the platform's hacked-account recovery flow first; it is faster than any police process.
- Warn your contacts from another channel so nobody sends money.
- File on cybercrime.gov.in with screenshots and the fake profile URL; the complaint number speeds up platform takedown.
How to prevent it
- Two-step verification on WhatsApp and 2FA (authenticator app, not SMS) everywhere else.
- Never share a code you receive, whoever asks.
- Unique passwords through a password manager.
Frequently asked questions
How long does Instagram take to restore a hacked account?
Hours to a couple of weeks, depending on whether you can still access the original email or phone and whether the attacker changed them. Starting from instagram.com/hacked with a selfie-video verification is usually fastest.