Work out which of four states your account is in, then use the appeal attached to that state and nothing else. Disabled, suspended, restricted, and hacked all look similar from the login screen, and they are handled in completely different ways. The most common mistake, and the most expensive one, is opening a replacement account while you wait.
At a glance
- Disabled
- The notice says your account was disabled or permanently disabled. First move: submit the appeal that appears when you try to log in, and complete the identity check if one is offered.
- Suspended
- You are locked out temporarily with a stated review window and a countdown. First move: appeal inside that window, once, and let the clock run.
- Restricted or action blocked
- You can still log in, but posting, following, liking, or messaging is blocked. First move: stop the activity that triggered it and disconnect any third party tool logging in as you.
- Hacked
- The email address, phone number, or password changed without you. First move: go to instagram.com/hacked from a browser and start the recovery flow. Do not pay whoever took it.
Which state are you in?
The wording on the notice tells you, and it is worth reading twice before acting, because the four states share almost no steps. This is the fastest way to place yourself.
| State | What it looks like | Common cause | First step |
|---|---|---|---|
| Disabled | Login fails with a notice saying the account was disabled, sometimes worded as permanently disabled. | Accumulated policy strikes, a bulk enforcement sweep, or a false positive on automated review. | Submit the appeal offered on that screen and complete any identity verification. |
| Suspended | Locked out with a countdown and a stated date when review closes. | A single content violation, or a report that triggered a hold pending review. | Appeal once inside the stated window, with a short factual explanation. |
| Restricted or action blocked | You are logged in, but an action fails with "Action Blocked" or "Try Again Later". | Mass following, bulk direct messages, automation tools, engagement pods, or an unusual login pattern. | Stop the behaviour, revoke third party app access, and wait out the block. |
| Hacked | Password rejected, contact details changed, or posts appearing that you did not publish. | Phishing message, reused password, or a connected app with wide permissions. | Start the recovery flow at instagram.com/hacked and secure the connected email account first. |
What to do, in order
The order matters more than the speed. Each step below either preserves evidence or avoids a signal that makes the next reviewer trust you less.
- Screenshot the notice and note the date. Capture the exact wording, the screen it appeared on, and the time. That wording is what tells you which state you are in, and it is the first thing anyone helping you will ask for. Notices also disappear once you tap through them.
- Identify which state you are in. Use the table above. A restriction is not a ban, a suspension is not a disablement, and treating one as another wastes the window you actually have.
- Use the in-app appeal or the review link in the notice. The appeal that counts is the one attached to your case, and it appears when you try to log in or inside the notice itself. Write a short, factual account of what happened. Reviewers respond to specifics, not to length or to frustration.
- Complete the video selfie or ID verification when asked. Instagram frequently asks for a short video selfie or a government ID to confirm you are the account holder. Do it promptly, in good light, with your face unobstructed. Submit it only inside the Instagram app or on instagram.com. Nobody legitimate asks for it over direct message.
- Wait the stated window, and do not resubmit repeatedly. Filing the same appeal five times does not move you up the queue. It reads as automated behaviour, and it can reset your position. Submit once, then wait the window the notice states.
- If you are restricted, stop the behaviour that triggered it. Mass follows and unfollows, bulk direct messages, scheduling tools with broad permissions, engagement pods, and any third party app that logs in as you rather than through the official API. Disconnect them before the block expires, or it comes back longer.
- Do not create a new account. A replacement opened while the original is under enforcement is ban evasion. The new account usually gets disabled too, and the pattern is visible to whoever reviews your appeal on the account you actually want back.
- Do not pay anyone claiming an inside contact, and never pay a hacker. Nobody sells access to a Meta reviewer, and the accounts offering it on Instagram and Telegram are running a second scam on people already having a bad week. Paying whoever took your account funds the next attack and gives you nothing you can enforce.
- Bring in a specialist when the path stalls. If an appeal has already been denied, if the account carries real revenue, or if a Business Manager and its ad accounts are caught up in the same enforcement, the case needs documented escalation rather than a sixth identical submission.
- Once it is back, harden it. Turn on two factor authentication, save the backup codes somewhere that is not the phone, remove unknown logins and unrecognised devices, and revoke every third party app you are not actively using.
The mistakes that make a temporary problem permanent
Three of them account for most of the cases that arrive at our door already damaged. The first is the replacement account, covered above, which converts a recoverable enforcement into a documented pattern of evasion. The second is paying a stranger who claims a contact inside Meta. Beyond the money, these people usually ask for your login details or your ID, which hands a second party the exact material a real appeal depends on.
The third is quieter. It is continuing to run the automation that caused the restriction, on the theory that the block was random. Instagram's enforcement on inauthentic activity escalates. A first action block lasts hours, a second lasts days, and a pattern ends with the account disabled. If a growth tool, an inbox automation, or a scheduling app was logging in with your username and password, that tool is the case, and it needs to go before the appeal is worth filing.
Meta publishes its own guidance on disabled Instagram accounts and on accounts that have been hacked. Read both. They are dry, and they are also the actual rules the reviewer is working from.
Locked out of an account your business runs on?
Send us the handle, the notice, and a timeline. We respond within one business day and tell you on the call whether there is a realistic path back.
Start a Recovery CaseHow Nexus Multimedia handles these cases
Recovery runs through Instagram's official appeal, verification, and escalation channels with proper documentation. There is no other route, and any agency describing one is describing something that does not exist. What differs between a case that comes back and a case that does not is usually the quality of the package: the right form, the right evidence, a factual timeline, and follow up that continues until there is an actual decision rather than silence.
We accept a case only when there is a realistic path to recovery, which is why most of the cases we accept come back. On the intake call we tell you which restriction you are under, what most likely triggered it, and whether we think the appeal is worth building. If it is not, we say so, and there is nothing to pay. A recent example: two Instagram accounts belonging to a US telehealth company were restored and handed back with security hardening in place.
The full scope of what we handle, on Instagram and elsewhere, is on our social media account recovery page. If the account in question is tied to a Meta ad account that has also stopped running, the companion piece is how to get a restricted Meta ad account back to active. Once an account is back and secure, keeping it growing is a different job, and that sits with our content and social team. If the wider problem is what people find when they search your name rather than one login you cannot reach, start with reputation management instead.
Frequently asked questions
Not always. Permanently disabled is the standard wording Meta puts on the notice, and accounts carrying it are still restored on a documented appeal, particularly where the enforcement was automated or the account was compromised at the time. It is a strong signal, not a closed door.
Feature restrictions and action blocks usually clear in days, often on their own once the window stated in the notice passes. Disabled account appeals take longer and can run into weeks, because they sit in a human review queue. The notice states the window that applies to your case, and that is the number to work from.
Usually yes. Changed contact details do not transfer ownership. Instagram's recovery path runs on identity verification rather than on the email address currently attached to the account, and Meta's guidance covers the case where a login email was changed without your permission.
No, and it actively hurts. A new account opened while the original is under enforcement is treated as evasion. The replacement tends to get disabled as well, and the pattern is visible to the reviewer looking at your appeal.
Yes. Instagram uses a short video selfie to confirm that the person appealing is the account holder. It is safe when it is requested inside the Instagram app or on instagram.com as part of your own case, and it is not safe anywhere else. No legitimate recovery process asks you to send a selfie video or an ID to a person over direct message.