Business Account Recovery: Pages, Business Manager, Ads

Business and creator accounts are recovered through the same platforms as personal ones, but there are more moving parts. A Facebook Page or Instagram business account is controlled through people (personal profiles) and a Meta business portfolio (formerly Business Manager), and ad accounts are attached to that. Recovery usually means first restoring the personal profile of an admin, then the business portfolio using Meta's compromised business portfolio recovery, then checking every Page, ad account and payment method. Report unauthorised ad charges to your bank as well as to Meta.

#How is business account access structured?

On Meta, a business usually looks like this:

• People: personal Facebook profiles with roles (admin, employee, partner)
• Business portfolio (Business Manager): the container that owns assets
• Assets: Facebook Pages, Instagram accounts, ad accounts, pixels or datasets, catalogues, WhatsApp Business accounts
• Payment methods attached to ad accounts

An attacker who compromises one admin's personal profile can often add themselves to the portfolio, remove you, run ads on your card, and change Page names. That's why recovery has to go asset by asset.

"The most common entry point in business recoveries we review is still an admin's personal profile: phishing or a reused password, then the attacker adds themselves to the portfolio. Fake 'Meta' emails and ex" - employee seats show up too, but less often than a compromised personal login. Map every admin seat before you start appeals." - Md Shariar Shanaz Shuvon, Founder, AwareXone

#Step 1: Map what you've lost

Write down:

1. Which personal profiles had admin access, and which of them are compromised
2. The business portfolio ID, if you know it
3. Each Page, Instagram account and ad account, with IDs if possible
4. Payment methods attached, and any unusual charges
5. Who else had access: agencies, freelancers, former staff

#Step 2: Recover the admin's personal profile

Use facebook.com/hacked for the Facebook profile and instagram.com/hacked for Instagram. Secure the email account first, because whoever controls your email can reset other accounts (FTC).

#Step 3: Recover the business portfolio

Meta has a dedicated Business Help Center article, Recover a hacked or compromised business portfolio. Follow the current steps there. If you're an advertiser, Meta also points you to Meta Business Support (Meta Help Center). AwareXone's Business Manager hacked guide walks through common situations.

#Step 4: Secure Pages, Instagram and ad accounts

Once you have admin access again:

• Remove unknown people, partners and system users from the business portfolio
• Check Page roles and Instagram account access
• Pause any ads you didn't create and review billing
• Remove unknown payment methods and check your own for charges
• Review connected apps and integrations
• Restore Page names, usernames and content the attacker changed

See Facebook Page back after a hack: what to check.

#What about unauthorised ad spend?

Contact your card issuer or bank as soon as you see charges you didn't authorise. Don't wait for the platform's review. In the UK, the FCA says you should tell your bank as soon as you notice an unauthorised payment, within 13 months, and that the refund should normally arrive by the end of the next business day unless an exception applies (FCA). Rules differ in other countries, so ask your bank. Our ad-spend and chargeback guide covers this in detail.

#What if an agency or ex-employee is holding the account?

This isn't a "hack" in the usual sense, but it's one of the most common business access problems. Steps:

1. Ask in writing for access to be returned or transferred.
2. Gather proof that the business owns the asset: registration documents, invoices, domain email, brand trademarks.
3. Use the platform's business support channels.

See agency locked us out of our Facebook Page and former employee holds company accounts.

#Creator accounts: what's different?

Creators often run a single personal account that is also the business. Extra steps:

• Tell brand partners early, through another channel, so they don't pay scammers posing as you
• Check monetisation and payout settings once you're back in
• Document lost income in case you need it for police reports, insurance or contracts

See creator account hacked: brand deals at risk.

#How do I prevent a repeat?

• At least two trusted admins with separate, secured personal profiles
• Two-factor authentication for everyone with business access
• Least privilege: give agencies partner access, not full admin, where possible
• Offboarding: remove people the day they leave
• Train staff to spot fake "Meta policy violation" emails and DMs
• Keep an ownership file: business registration, invoices, domain records

See the business social account protection checklist.

#When should a business get professional help?

When ads are draining money, several assets are tangled together, the only admin is disabled, or revenue depends on the account. AwareXone (the publisher) offers business and creator recovery through official channels only: no passwords or OTPs, no promises. Any fee is confirmed only after a case review, and the AwareXone Protect Business plan (up to 10 accounts) covers prevention and readiness, not promised recovery. See how a case review works on the AwareXone Business Manager recovery page or the Facebook Page recovery page, or check pricing and the Trust Center.

"A typical business recovery order, drawn from the 1,300+ cases AwareXone has solved, is: regain the personal admin profile, remove unknown partners in Business Manager, restore Page roles, then lock payment methods and ad accounts. Skipping straight to the Page while the admin profile is still compromised usually fails." - Md Shariar Shanaz Shuvon, Founder, AwareXone

#What are the signs a business account has been compromised?

• New people, partners or system users in the business portfolio that you didn't add
• Ads or campaigns you didn't create, or a sudden rise in spending
• Page name, username or profile picture changed
• Emails about new admins, payment method changes or password resets you didn't request
• Staff locked out at the same time
• Customers reporting strange messages from your Page or WhatsApp Business number

If you see any of these, treat it as an incident: stop spending, then recover access, then report.

#Who should be on the recovery "team" inside the business?

Even a small business benefits from deciding roles in advance:

• Owner or decision-maker: approves actions and holds ownership documents
• Primary admin: handles recovery flows for the admin profile and business portfolio
• Finance: contacts the bank about unauthorised charges
• Communications: warns customers and followers through other channels

Write this down before anything goes wrong, with contact details and where your business registration and invoices are kept.