Unexpected campaigns, unfamiliar administrators, or unexplained payment changes may indicate unauthorized access. Act promptly, but document what you see before changing important settings.
Secure the affected accounts
From a trusted device, secure the associated personal account and business email. Change compromised passwords, review active sessions and recovery methods, and enable two-factor authentication.
Use Meta's official compromised-account support routes. Do not pay strangers who claim they can recover accounts through private access.
Inspect the business activity
Review people, partners, system users, campaigns, and payment changes. If you retain authorized control, pause unauthorized campaigns and remove clearly unauthorized access while preserving legitimate administration.
Record relevant dates, asset identifiers, transaction references, and screenshots for your incident report. Store that evidence privately.
Address payment concerns
Report unauthorized charges through the appropriate Meta and payment-provider channels. Contact your bank if payment credentials may be compromised. Recovery and refunds depend on the facts and the relevant provider's decision.
After recovery, review permissions and integrations before resuming normal activity.
For setup guidance, share a summary with MH Ads Agency—never passwords, recovery codes, or full card details.