Instagram or Facebook Hacked in Singapore: Where to Report

Here's the order to follow in Singapore.

Last checked: 29 October 2026 against the sources listed at the end of this guide.

Keep a dated note of every screen you see, including the exact wording shown, before you press continue on any form.

#Where do I report?

ScamShield's I've been scammed page gives four steps: contact your bank immediately, because it can act to stop further losses; file a police report online or at a Neighbourhood Police Centre or Post, or call the police emergency line for urgent help; tell your contacts and secure any compromised account by changing the password and turning on two-factor authentication; and for e-commerce scams, report the seller to the platform. It says you can also share information through the Police Hotline or the I-Witness e-Service.

Singapore's ScamShield Helpline page says the ScamShield Helpline is available 24 hours, every day. You can call it to check whether something is a scam, get advice, or, if you're a victim, be connected directly to one of seven banks: DBS/POSB, UOB, OCBC, Citibank, Maybank, Standard Chartered and HSBC. ScamShield says the helpline can't make a police report for you; that has to be done online with the police or at a Neighbourhood Police Centre.

Singapore's Online Safety Commission (OSC) began operations on 29 June 2026, according to the Ministry of Law. In its first phase it supports victims of five online harms: online harassment, doxxing, online stalking, intimate image abuse and image-based child abuse. The other eight categories of harm under the Online Safety (Relief and Accountability) Act 2025 will be implemented progressively.

#What should I do first?

1. Recover the account.
2. Warn friends.
3. Report scams to ScamShield.
4. File a police report if needed.

Related guides: Instagram or Facebook Hacked in the UK: Should I Report It to Report Fraud?, Hacked Instagram or Facebook in Australia: Do I Report to ReportCyber or IDCARE First?, Instagram or Facebook Hacked in the US: Should I File With the FBI's IC3 or the FTC?.

#What Do the Official Help Pages Say?

If you think someone else got in and posted the content, Instagram's If you think your Instagram profile has been hacked page lists the recovery steps. If you got an email from security@mail.instagram.com saying your email was changed, you may be able to undo it with the secure my account option in that message. You can also request a login link from the login screen with Forgot password, and if that fails, request a security code or support from a mobile device.

Instagram's Review recent emails page says you can see recent official Instagram emails from Settings: open Meta Account (or Accounts Center), then Security, then Recent emails. Security and login emails are listed under Security. Instagram says official security messages are only sent to your email address, from @support.facebook.com, @support.instagram.com, @facebookmail.com, @mail.instagram.com or @global.metamail.com, and that Instagram will never contact you about profile security through Direct Messages.

#What common mistakes should I avoid?

• Reporting before recovering.
• Not warning friends.
• Paying promised recovery services.
• Ignoring your email security.

ScamShield's What to include when you file a police report page lists what to gather: the date and time of the scam, how they contacted you, the scammer's phone number, email, website links or other contact details, screenshots of messages, receipts or invoices, bank transaction records showing the loss, and any recordings. Mention reports you've already made, for example to your bank or the ScamShield Helpline, with their reference numbers, and the steps you've taken to stop further losses.

Instagram's Secure your Instagram account page calls two-factor authentication the single most effective step to protect an account from hackers, because it asks for a code when someone logs in from a device Instagram doesn't recognise. It also recommends a strong, unique password you haven't used elsewhere, avoiding personal details like names and birthdays, and never giving your password to anyone you don't know and trust.

#How do I keep the account safe while I sort this out?

• Never share a login code, password or backup code with anyone, including people who say they work for Meta, the police or a recovery service.
• Make sure the email address and phone number on the account are ones you still control, and remove any you do not recognise.
• Turn on two-factor authentication where the platform offers it, ideally with an authenticator app, and keep your backup codes somewhere offline.
• Log in only from the official app or by typing the address yourself, not from links in messages, comments or ads.
• Keep screenshots of every notice, email and step you take, with dates, in case you need them for a review or a report.
• Make one careful attempt at each official step rather than many rushed ones, because repeated failed attempts can trigger extra checks.

#When It Is Safer to Get Expert Help

Ask for help before you appeal if the account matters to your income, your business or your memories, if you have already had one appeal rejected, or if you cannot tell whether the problem is a bug, a restriction or a hack. That is where most avoidable losses happen.

AwareXone is independent and not affiliated with Meta, Instagram, Facebook, WhatsApp or Threads. Recovery work is best-effort and the platform makes the final decision.