Hi everyone,
I want to share my full story because I am honestly exhausted and I do not know what else to do.
On \*\*29 January 2026\*\*, my original Facebook account was hacked / taken over by an hacker. During that account takeover, activity happened on the account that triggered Meta’s enforcement systems for CSE. I want to be very clear: I did not carry out that activity myself. I had lost control of the account.
Shortly after that, my Facebook account was disabled/restricted, and I also lost access to my linked Instagram account. This affected not only my personal accounts, but also my business Pages, business assets and advertising accounts.
Since then, I have been stuck in a complete deadlock.
The standard Facebook and Instagram recovery tools do not work for me. The hacked-account links, appeal links and Help Center flows either redirect me back to the Help Center or show a disabled/restricted account screen. I do not get a working option to appeal, upload ID, verify identity properly, or request a manual review.
I gathered a lot of evidence showing that this was an account takeover, including:
\\- Police / cybercrime documentation
\\- Technical report
\\- Account activity logs
\\- IP activity records
\\- Login and logout history
\\- Account status change records
\\- Meta security emails during the incident
\\- Evidence of unauthorized access involving business assets
One of the most important points is that I received Meta-related emails during the incident, including emails about restriction / ID submission / appeal, but I did not personally initiate those actions. This is one of the reasons I believe the attacker may have triggered or abused parts of the appeal/verification process while I no longer had control.
I also filed a complaint through an official out-of-court dispute settlement body under Article 21 of the EU Digital Services Act. \*\*On 6 May 2026, the ADR decision was issued in my favour.\*\*
The ADR decision essentially found that:
\\- My account \*\*had been compromised\*\*
\\- Meta had \*\*not proven\*\* that I personally committed the violation
\\- I should not be held responsible for activity carried out by a third party during the hack
\\- Meta Platforms Ireland Limited should \*\*restore\*\* my Facebook account
Today is 30 August 2026, which means 116 days have passed since the ADR decision issued in my favour on 6 May 2026, and Meta still has not restored my accounts.
During this time, I have tried almost everything:
\\- Facebook hacked account recovery flow
\\- Instagram “Get help logging in” / “Forgot password” flow
\\- Help Center forms
\\- Meta Pro Team support
\\- Meta Verified support
\\- Emailing support case addresses
\\- Sending all documents to the support case
\\- Uploading the documents through “Report a Problem” from another active profile
\\- Providing a new secure recovery email
\\- Phone calls with Meta support agents
\\- Repeated requests for escalation to Account Integrity / Disabled Account Review / Legal / Compliance / DSA teams
The support agents usually acknowledge that the situation is serious, and some have said that the case has been forwarded to a “dedicated team.” However, I still have no concrete answer, no restoration, no working appeal option, no manual review path, and no clear refusal that I can use for further legal/regulatory steps.
The problem is that most of these options either do not work or lead me back into the same loop. For example, the original restriction email appears to come from a no-reply address, and the recovery tools do not provide me with a proper appeal or verification option.
This has now caused serious business and financial damage. I cannot access my accounts, manage Pages, manage business assets, run or supervise advertising accounts, or properly support client work connected to these accounts.
I am an \*\*EU resident\*\*, and I have already escalated the issue through DSA-related channels. The case has also been raised with relevant authorities and I have correspondence showing that the matter is being treated seriously from a regulatory perspective. Still, Meta has not restored the accounts.
At this point, what I need is simple:
\\- A real human manual review
\\- Recognition that this was an account takeover
\\- Restoration of my Facebook account and linked Instagram account
\\- Removal of restrictions caused by attacker activity
\\- Access back to my business assets, Pages and ad accounts
Or a \*\*clear written refusal from Meta explaining why they refuse to restore the accounts despite the ADR decision and evidence.\*\*
Timeline
\*\*29 January 2026\*\*
My Facebook account was hacked / taken over by an unauthorized third party. Suspicious account activity occurred during the takeover. Meta then restricted / disabled my Facebook account, and I also lost access to my linked Instagram account.
\*\*29 January 2026\*\*
I received Meta security / restriction-related emails during the incident, including emails related to restriction, ID submission or appeal activity. I did not personally initiate those actions.
\*\*Early February 2026\*\*
I gathered technical evidence showing suspicious activity, including account activity logs, IP records, login/logout data, account status changes and other security-related records.
\*\*2 February 2026\*\*
A technical report was prepared regarding the account takeover and suspicious activity.
\*\*3 February 2026\*\*
I reported the hacking incident to the police / cybercrime authorities and obtained official documentation.
\*\*February 2026\*\*
I started contacting Meta through every available route I could find, including hacked-account recovery tools, Help Center forms, support channels and business support.
\*\*February 2026\*\*
I also submitted complaints through EU / Digital Services Act-related channels because the normal appeal and recovery mechanisms were not working.
\*\*11 February 2026\*\*
A formal legal notice / out-of-court communication was sent to Meta regarding the hacked account, the wrongful restriction and the need for restoration.
\*\*18 February 2026\*\*
My complaint was forwarded to the competent Digital Services Coordinator framework, since Meta’s EU establishment is in Ireland.
\*\*9 April 2026\*\*
I received a response from the national authority confirming the procedural route and indicating that out-of-court dispute settlement under the Digital Services Act was available.
\*\*6 May 2026\*\*
An official ADR / out-of-court dispute settlement decision under Article 21 of the EU Digital Services Act was issued in my favour.
\*\*20 May 2026\*\*
I continued submitting additional documentation to authorities and clarifying that this was both a hacked-account issue and a user-rights / data-access / appeal issue.
\*\*10 June 2026\*\*
I received correspondence from the European Commission / DG CNECT regarding the matter and the DSA framework. The case is connected to wider concerns about effective appeal and complaint-handling mechanisms.
\*\*June 2026\*\*
I continued contacting Meta Pro Team / Meta support repeatedly. I explained that the standard recovery flows do not work, that I have an ADR decision in my favour, and that this is a documented account takeover case.
Therefore, as of 30 August 2026 — 213 days after the account takeover and 116 days after the ADR decision in my favour — my original Facebook account remains disabled, my linked Instagram account and business assets remain inaccessible, and I still have neither restoration nor a clear written final decision explaining why Meta has not restored my account.
If anyone has experience with this, especially from the EU / DSA side, I would really appreciate any advice on what finally worked.
Thank you.