What Exactly Happens When a Social Media Account Gets Hacked?

A “hack” means an unauthorised person has gained access to your account credentials — your password, OTP, or recovery email — and is now controlling your digital identity. This is not merely a technical glitch; under Indian law, it is a computer-related offence punishable under the Information Technology Act, 2000 (IT Act). The hacker may post content in your name, message your contacts for money, or sell your personal data. Each of these acts triggers a different legal provision.

What Is the Step-by-Step Facebook/Instagram Reporting Process?

Step 1 — Secure Your Access Immediately
Go to facebook.com/hacked or instagram.com/hacked. Follow the “Report Compromised Account” flow. Meta will ask you to verify your identity via email, phone number, or government ID. Do this from a trusted device.

Step 2 — Change All Linked Credentials
Change the password of the email address linked to your social account. Enable two-factor authentication (2FA). If the hacker changed your recovery email or phone number, use Meta’s identity verification upload.

Step 3 — Document Every Change
Screenshot everything — the hacker’s posts, messages sent from your account, changed profile details, and any suspicious login alerts. These are your primary evidence.

Step 4 — Report to the National Cyber Crime Portal
Visit cybercrime.gov.in and file a complaint under the category “Social Media Account Hacking / Impersonation.” You will receive an acknowledgement number. In Bihar, you can also visit the Cyber Crime Police Station at your district headquarters or the Bihar Police Cyber Crime Unit in Patna for in-person filing.

Step 5 — Notify Your Contacts
Inform friends, family, and business contacts that your account was compromised. This limits the spread of phishing or fraud attempts made in your name.

Which IT Act Sections Apply to Social Media Hacking?

The IT Act, 2000 (as amended in 2008) contains specific provisions that cover every stage of a social media hack:

These sections are cognizable offences under Section 77B of the IT Act, meaning police can arrest without a warrant and investigate directly.

When Does a Legal Notice Become Necessary?

A legal notice is a formal communication sent by an advocate to the wrongdoer (or to the platform, if they are unresponsive) demanding specific action and warning of legal consequences. It becomes necessary in these situations:

1. Platform Non-Response: If Meta/Facebook/Instagram fails to restore your account within a reasonable time (typically 7–14 days) after repeated reporting.
2. Financial Loss: If the hacker has induced your contacts to transfer money, or has accessed linked payment wallets (Google Pay, PhonePe, UPI).
3. Reputational Harm: If defamatory, obscene, or business-damaging content has been posted from your account and remains visible.
4. Impersonation & Fraud: If a fake profile has been created using your identity to cheat others — this attracts both Section 66D of the IT Act and Section 319 (erstwhile 419) of the Bharatiya Nyaya Sanhita (BNS), 2023.
5. Employer/Client Liability: If you are a business owner or professional whose compromised account has caused loss to clients or breached contractual confidentiality.

A legal notice serves two purposes: it puts the recipient on formal notice (creating a record for court), and it often accelerates platform cooperation because companies take advocate-issued notices more seriously than individual complaints.

How to Preserve Digital Evidence for Court?

Under Section 65B of the Indian Evidence Act, 1872, electronic records are admissible in court only if they are certified and preserved properly. Follow these rules:

• Take screenshots with timestamp and URL visible.
• Do not edit or crop the image.
• Save the original device (phone/laptop) from which the hack was detected — it may contain IP logs and metadata.
• Preserve all emails from Meta regarding login alerts, password changes, or account suspension.
• If you visited a cyber café or used public Wi-Fi, note the date, time, and location.

In Bihar, the Forensic Science Laboratory (FSL) in Patna and district-level cyber cells can assist in extracting and certifying digital evidence for court proceedings.

What Is the Role of Bihar Cyber Crime Police in Account Hacking Cases?

The Bihar Police Cyber Crime Investigation Unit operates under the Economic Offences Unit (EOU) and coordinates with the National Cyber Crime Reporting Portal. Once you file a complaint:

• An FIR is registered under relevant IT Act sections.
• The Investigating Officer (IO) requests IP logs and device information from Meta India under Section 69B of the IT Act (power to monitor/collect traffic data).
• If the hacker is traceable within India, the IO coordinates with the local police of that jurisdiction.
• For cross-border hacks, Section 75 of the IT Act provides extraterritorial jurisdiction if the compromised computer resource is located in India.

Victims in Bihar can approach the Cyber Crime Police Station at Patna or their respective district SP (Cyber Crime) offices for status updates.

Can a Hacked Business Account Lead to Additional Legal Liability?

Yes. If you are a business owner, taxpayer, or professional whose business page or Instagram shop was hacked:

• GST/ITC Risk: If the hacker accesses your GST portal or banking credentials linked to your business, you may face fraudulent return filings or input credit misuse. Immediate intimation to the GST department and your CA is essential.
• Client Data Breach: Under the Digital Personal Data Protection Act, 2023 (DPDPA), if client personal data is leaked from your compromised account, you may have a duty to notify affected parties and the Data Protection Board.
• Contractual Breach: If client communications or confidential files were accessed, review your contracts for cyber-incident notification clauses.

What Remedies Can a Court Grant in Social Media Hacking Cases?

Indian courts have evolved robust remedies for cybercrime victims:

1. Mandatory Injunction: Directing the platform to restore the account and remove fraudulent content.
2. Damages: Compensation for financial loss, reputational harm, and mental agony under Section 43 of the IT Act.
3. Criminal Prosecution: FIR leading to trial under Sections 66, 66C, and 66D of the IT Act, and parallel BNS provisions (Sections 318, 319 for cheating and personation).
4. Anticipatory Bail Defence: If you are wrongly accused of content posted by the hacker, a lawyer can file for anticipatory bail and quashing of FIR under Section 482 CrPC before the Patna High Court.

How Long Does the Entire Recovery Process Take?

Timelines vary based on the complexity of the hack, the hacker’s location, and the platform’s cooperation.

FAQ: अक्सर पूछे जाने वाले प्रश्न

📬 संपर्क करें / Get in Touch