Facebook Hacked, Then Flagged Under 13: What Is Left

Someone took over your Facebook account. Soon after, Facebook told you it had classified you as under 13, and the final notice says "You cannot request another review of this decision." Instagram and Threads may have gone with it. You are an adult, you have years of photos and contacts on that profile, and the message reads like the end of the road. One wrong step can cost you the account, so know what you are doing before you start. This guide separates the hack from the age decision, explains what the notice means in Meta's own words, and lists the official routes that may still apply.

Last checked: 10 November 2026.

#Quick Answer

If Facebook classified you as under 13 after a hack and says you cannot request another review, the normal appeal has closed. Report the takeover through Facebook's hacked account flow, use any Instagram age appeal still offered, and if you live in the EU, consider a certified dispute settlement body. Ignore anyone offering to restore it for you.

#What This Looks Like in a Real Case

The Desert Trail reported on 9 November 2026 that a California artist lost access to Facebook, Instagram and Threads after her account was compromised on 16 September 2026. According to her account in the report, someone uploaded fake ID documents in her name three times, Facebook then appeared to classify her as under 13, and she was told she could not request another review. The report says Meta's recovery tool did not recognise her verified email and number, a mailed letter and a privacy request did not bring the profile back, and an EU dispute body said the appeal had to be filed from inside the EU. Treat this as one reported case. Your notices may differ.

#Which Notice Are You Seeing?

Meta uses several similar messages. The route that is still open depends on which one you have. Quote the exact wording you see, because notices vary by app, region and device.

#What Cannot Request Another Review Means

Facebook's help page on suspended or disabled accounts says you can appeal a suspension within 180 days, and that the period varies by region. It then says: "If you don't appeal within 180 days or if your appeal isn't successful, your account will be permanently disabled. You won't be able to request another review of the decision." It also notes that Meta may disable an account without suspending it first in severe or time-sensitive cases.

So the notice is not a glitch. It tells you that, from Meta's side, the standard review has finished. That does not prove the decision was right, but it does mean that pressing the same button again or writing a fresh appeal through unofficial channels is unlikely to reach anyone.

#Step 1: Report the Hack Separately

The age decision may have been triggered by what the attacker did, so the takeover is its own report. Facebook's hacked account guide says to visit the hacked account flow on a device you have used to log in to Facebook before. Use your usual browser and network if you can.

1. Open the hacked account flow from a device you have logged in on before.
2. Follow the prompts to say your account was compromised.
3. Use the contact details you had on the account when asked.
4. Keep every security email from Meta, including any about new emails, passwords or ID uploads you did not make.
5. Write a dated timeline: when you last had access, when the alerts arrived, and when each notice appeared.

Also secure the email account linked to Facebook, since that is often where a takeover starts. Our guide to the first 24 hours after a hack covers that order of steps.

#Step 2: Use the Instagram Age Appeal If It Is Offered

Instagram's page on why it asks for your date of birth says that if your account is under review for being under 13, you will see "You're not old enough to use Instagram" and the account will be removed unless you appeal. Its appeal asks you to follow the on-screen instructions and submit a valid ID, and the review may take up to 30 days. If Meta finds a mistake, it says the account will be restored.

Instagram's page on confirming your age adds that age checks can use your date of birth, photo ID or a video selfie through Yoti, and that this information is not shown on your profile. If you still see an age prompt on any linked app, use it with your real ID. See our guide to the Instagram age verification appeal for that route in detail.

#Step 3: EU Residents Can Ask a Dispute Body

The European Commission's page on out-of-court dispute settlement bodies explains that under the Digital Services Act, users can ask a certified body to review a platform's moderation decision, including decisions restricting accounts. It says these bodies cannot impose a binding settlement, but platforms must engage with them in good faith. The page lists the certified bodies and the platforms each one covers. In the reported case above, the body said the request had to come from inside the EU, so check eligibility first.

#What Not to Do

• Do not open a new account to replace the old one. Meta's disabled account page lists misrepresenting your identity to deceive others or avoid enforcement as a reason accounts are disabled.
• Do not upload someone else's ID or an edited document. Use only your own real ID through Meta's own prompt.
• Do not reply to messages offering to restore the account through Meta staff.
• Do not send repeated letters or forms with the same content. Keep one clear record instead.

#What Only Meta Can Decide

Only Meta can reverse a permanent disable or accept an age appeal. A dispute body can give an opinion, but Meta's help pages do not promise a further review once the final notice appears. Some accounts in this position are not restored. That is why a clear, dated record matters: it is the strongest thing you can bring to any route that is still open.

#When It Is Safer to Get Expert Help

This is one of the hardest Meta cases. It mixes a takeover, a false age signal and a final notice, across several linked apps. The real risks are plain: using the wrong form wastes time, an ID uploaded in the wrong place can add confusion, and a replacement account can make matters worse.

If you are unsure about any step, having an experienced team review your case is the safer choice. AwareXone sorts out which notice applies to each app, builds the takeover timeline, and prepares the reports you submit yourself through Meta's own tools. We never ask for your password or codes, and we cannot promise any outcome. Start with our Facebook account recovery service, and read how we work on our trust page.

#Frequently Asked Questions