Updated August 2026. Facebook’s recovery interface changes — the principles below stay constant.
Facebook account compromise is one of the most common digital problems in Nepal, and the recovery process is time-sensitive. Here is how to recover a hacked Facebook account in the correct order, using only official channels.
Act in this order
| Step | Action | Why first |
|---|---|---|
| 1 | Secure your email account | If the attacker controls your email, they control every reset |
| 2 | Try `facebook.com/hacked` | The official recovery flow |
| 3 | Change password, log out all sessions | Removes the attacker’s access |
| 4 | Enable two-factor authentication | Prevents immediate re-compromise |
| 5 | Warn your contacts | Attackers use your account to scam friends |
| 6 | Report to Nepal Police Cyber Bureau if money was involved | Creates a formal record |
Step 1 is the one people skip and the one that matters most. Recovering Facebook while the attacker still reads your email is pointless.
The official recovery route
Use `facebook.com/hacked` — the official reporting page. It walks through identity verification and account recovery.
If you can still log in:
- Change your password immediately to something unique
- Go to Settings → Security and Login → Where You’re Logged In and log out of all sessions
- Enable two-factor authentication
- Review Apps and Websites and remove anything unfamiliar
If you cannot log in:
- Use Forgot Password with your registered email or phone
- If the attacker changed those, use the identity verification flow at `facebook.com/hacked`
- Trusted contacts, if you configured them previously, provide another route
- Be patient — verification can take days
Never use a third-party “Facebook recovery service”. Every one of them is either a scam or a data harvester. There is no paid shortcut; Facebook’s own process is the only route.
What to do about the damage
Warn your contacts immediately through another channel — Messenger from a friend’s phone, Viber, WhatsApp, a phone call. Compromised Nepali Facebook accounts are used almost immediately to message friends asking for money, usually via a mobile wallet.
Check what was posted or sent from your account and delete it once recovered.
Check linked accounts — anything you signed into using Facebook Login.
If money changed hands, report to the Nepal Police Cyber Bureau. A formal complaint is also what mobile wallet providers require before they will investigate a transfer.
Preventing the next one
1. Two-factor authentication — this is the single most effective step. An app-based authenticator is stronger than SMS, because SIM-swap attacks are real.
2. A unique password for Facebook, not reused anywhere. Password reuse is how most Nepali account compromises actually happen — a breach on some unrelated site hands the attacker your Facebook password.
3. Secure your email account first, with its own 2FA. Your email is the master key to everything else.
4. Recognise the common attacks:
- Messages from “friends” asking you to vote in a contest via a link
- Fake login pages that look like Facebook — check the address bar
- “Your account will be deleted” urgency messages
- Free giveaway and lottery scams
5. Never enter your Facebook password on a page you reached from a link. Type `facebook.com` yourself.
6. Review connected apps periodically and remove what you no longer use.
Our cybersecurity basics guide covers the wider picture.
Frequently asked questions
How do I recover a hacked Facebook account in Nepal? Start at `facebook.com/hacked`, but secure your email account first — otherwise the attacker intercepts every reset.
How long does recovery take? Minutes if you still have email access; several days if identity verification is required.
Should I pay someone to recover my account? No. Every paid “recovery service” is a scam. Facebook’s own process is the only legitimate route.
Where do I report cybercrime in Nepal? The Nepal Police Cyber Bureau. File a formal complaint, especially if money was involved.
What stops it happening again? Two-factor authentication with an authenticator app, plus a unique password and a secured email account.
The bottom line
Recovering a hacked Facebook account in Nepal starts with your email, not with Facebook. Secure that, run the official `facebook.com/hacked` flow, log out every session, and turn on app-based two-factor authentication before you do anything else. Warn your contacts fast — the scam messages go out within minutes.