Are Instagram account recovery services legit? How to tell a real consultant from a scam

Some Instagram account recovery services are legitimate, but most of the ones that find you through comments or direct messages are not. A legitimate service can only work through the same official channels you can use yourself: the review offered in the app, Instagram’s hacked account process and Meta’s Help Center routes. What it adds is diagnosis, evidence and wording, never access. Anyone who asks for your password or a login code, guarantees the result or claims to work for Meta is not a legitimate service.

We are one of these services, so this guide does not ask you to trust us. It gives you the tests and lets you apply them to anyone, including us.

The short answer

• No one outside Meta can restore an account. Meta makes the decision in every case.
• A real consultant prepares and files a case. It finds the right channel, builds the evidence and writes the review request.
• Any one of these ends the conversation: a request for your password or codes, a guaranteed result, a claim to work for Meta, or payment by gift card, cryptocurrency or wire transfer.
• Good signs: a free assessment, a written quote before you pay, the official channel named and shown to you, and an honest “no” when the violation was real.
• You can always do it yourself. The official appeal and recovery routes are open to you directly; nobody has to file them for you. Help is worth paying for when a case is complicated, not as a shortcut.

What a recovery service can and cannot do

A legitimate service can:

• read the notice and work out which policy area and which state the account is in;
• choose the right official channel, and the order that keeps the others open;
• assemble evidence a reviewer can check quickly: identity, ownership, licences, timelines;
• write the review request clearly and accurately;
• track the case and tell you when nothing more can be done.

It cannot:

• log in to Meta’s systems or see what a reviewer sees;
• restore, unlock or “unban” an account;
• skip the queue or reverse a final decision;
• guarantee anything.

There is also a line it should not cross. Instagram’s Terms of Use say you cannot misuse a reporting, dispute or appeals channel, for example by making fraudulent or groundless reports or appeals. A service that files the same appeal dozens of times, or invents facts to make a case look stronger, is putting your account at further risk.

Seven tests that separate a consultant from a scam

1. It never asks for your password or a login code

This is the clearest test. Instagram’s Terms prohibit soliciting, collecting or using other users’ login credentials, and Facebook’s help page on fake messages says it will never ask for your password in an email. Legitimate work does not need your login. You stay in control: you open the screens, you submit, and you share screenshots or documents. The same goes for two-factor codes, backup codes and links that “confirm your identity” outside the app.

2. It does not guarantee the outcome

Meta decides, and no outside party can promise what Meta will do. A guarantee means the seller either does not understand the process or is not planning to use it. Watch for the softer versions too: “99% success rate”, “back in 24 hours” or “100% recovery”, offered before anyone has read your notice.

3. It does not claim to work for Meta

An independent consultant is not Meta, and a real one says so. If someone presents themselves as Meta staff or Meta support, compare it with how Meta’s own paid support works: Meta Verified support is a case you open yourself, from your verified profile in the app, and it gives you a case ID you can see on your support screen. A stranger messaging you from an outside account is not that.

4. It names the official channel and shows you the submission

Ask which route the case will go through. Legitimate answers are specific: the review offered on the suspended account screen, Instagram’s hacked account process, Meta’s Account Recovery Hub, an intellectual property counter-notice, Business Support for ad accounts. You should see the text before it is submitted and a record after. If the answer is vague (“our methods”, “a special team”, “backend”), there is no channel.

5. It tells you when the answer is no

Ask: “What would make you decline my case?” A consultant who reads cases properly has an answer. Some accounts are not recoverable: the violation was real, the final decision has been made and the deletion window has passed, or the evidence does not exist. A service that accepts every case is selling hope, not work.

6. You know the price and the terms before you pay

Legitimate pricing is boring and written down: what the fee covers, what happens if Meta says no, and whether any part is refundable. You should not discover a “final step” fee after you have paid. The FTC’s warning about refund and recovery scams, written about people who already lost money to a scam, describes a pattern we also see around lost accounts: unexpected contact, a story built to gain trust, and a request to pay first. It also says only scammers insist on payment by cash, gift cards, cryptocurrency or wire transfer.

7. It is a real business, and it did not find you first

Look for a named business with a website, published terms and a privacy policy, and a person who signs the work. Then think about how you met. In our experience, scam accounts watch comments and posts from people who have just lost an account and reply with a “specialist” to contact. The FTC’s rule of thumb in the same warning is blunt: if someone contacts you and asks for an upfront fee, that is a scammer. You choosing a service after reading about it is very different from a stranger choosing you.

Questions to ask before you pay

1. Which official channel will you use, and will you show me the submission?
2. Do you need my password or any code? (The only acceptable answer is no.)
3. What would make you decline my case?
4. What exactly does the fee cover, and what happens if Meta says no?
5. Who will work on my case, and how do I reach them?
6. Can I do this myself, and if so, why would I pay you?

The last question is the most revealing. An honest consultant will tell you when your case is simple enough to handle alone.

When doing it yourself is enough

For many cases it is. If you have not yet used the review offered on the account screen, start there. If your account was hacked and you still control the email address or phone number on it, Instagram’s own process is the route to use first. Our guide to Instagram appeal options lays out the official routes in order, and the Account Recovery Hub guide covers the hacked account side. Outside help makes more sense when a first review has already failed, when several accounts or business assets are involved, or when the account is the business.

If you already paid a scammer

Stop replying and do not pay the “last fee”; there will always be another one. If you shared a password or code, change it and turn on two-factor authentication. Contact your bank or card issuer about the payment as soon as possible. In the US, report it to the FTC at ReportFraud.ftc.gov; elsewhere, your national fraud reporting service or the police. Report the scam account on Instagram as well. Our guide to recovery scam messages shows the scripts these accounts use, so you can recognise the next one.

When to get help

If your first review has failed, the account carries a business, or the case has several moving parts, a second pair of eyes can help. Our disabled Instagram account recovery and hacked account recovery services start with a free case review. Apply the seven tests above to us as well: we never ask for passwords or codes, we work only through Meta’s official channels, we quote a fixed fee in writing before any work starts, we do not promise outcomes, and if the review shows the violation was real, we will tell you and decline the case.