In this series I've covered why accounts get disabled and how to prevent it. This article is about what to do when it's too late for prevention. One framing note first: Meta changes its appeal flows and screens from time to time; the logic and order below are durable, the exact screens are not. And one hard truth: not every account comes back. But almost every account that does come back belongs to someone who ran the process below calmly and in the right order.
Step 0: Stop and diagnose
Mistakes made in the first 24 hours can't be undone in the following weeks. So diagnose first: what exactly do you see when you try to log in? "Your account has been suspended" with an appeal button → you're on the standard appeal path. "Your account has been disabled" → a policy shutdown; a time-limited appeal window is running. Password doesn't work, a different email/phone is attached → the account isn't disabled, it's hijacked; that's a completely different path (below). Account vanished from search but login works → not a shutdown but a restriction; that calls for waiting and behaviour correction, not appeals. Filing the wrong form on a wrong diagnosis is the number-one way to lose weeks.
Step 1: Learn the deadlines and put them in your calendar
For disabled accounts the appeal window is limited — the period stated in Meta's notices generally runs from the disabling date, and if it lapses the account enters permanent deletion. The moment you see a deadline on screen or in email, write it into your calendar. The account permanently deleted because its owner "wanted a few weeks to calm down first" is the saddest scenario I've seen — second only to paying a scammer.
Step 2: Prepare your evidence file
Before you start any appeal, gather in one folder: official ID proving who owns the account (personal), or tax/trade registration plus an authorised person's ID (business); proof linking the account to the brand — domain email, the profile linked from your website, the connected ad account with invoices; screenshots of the shutdown notices; and, if you know it, your explanation of the content or behaviour that triggered the action. If the name on the ID doesn't match the account's claimed identity (an account created under an ex-employee's name, say), include the documents that fix that. Don't fill in any form before this file is ready; scrambling for ID mid-process is the classic way appeals time out.
Step 3: The in-app appeal — one, and strong
The main path is the appeal flow at login: you state you disagree with the decision and verify identity if asked. Verification usually comes as a video selfie or an ID upload — a rushed selfie in bad light that doesn't match the profile's photos will fail automated matching; take this step seriously. If you're given a free-text field, hold to three principles: short, concrete, honest. "I violated nothing, I'm a victim" says nothing. Instead: who the account is, what it posts, your explanation of what may have triggered the action (e.g. "I had granted access to a scheduling tool on date X; I have revoked it and believe the flagged behaviour may have originated there"), and the corrective actions you've taken. If a violation genuinely happened, argue acknowledgement plus remediation, not denial; on things like repeat copyright strikes, a credible correction commitment recovers more accounts than a clean denial does.
Step 4: The discipline of waiting
The hardest part comes after filing: waiting. Response times range from hours to weeks. During this period the don'ts matter more than the dos: don't resubmit the same form daily (stacking the same case in the queue can reset your place in it), don't file "let me try my luck" appeals with different identity details (identity inconsistency poisons the case), and don't immediately open a new account from the same device to grab your old username (a ban-evasion signal that endangers both accounts). A sane rhythm: first appeal → 7–10 days of silence → one polite follow-up → if still silent, move to alternative channels.
Step 5: Alternative channels — the advertiser's advantage
If the standard flow stays silent, these come next. Advertiser support: businesses with active ad spend can reach live chat support in the Meta Business help center; agents can open Instagram account cases, and in my practice this is the channel that has recovered the most accounts. Meta Verified: subscription support is a second door in recovery cases — if not for the disabled account itself, then for problems in the linked-account structure. Rights-based routes: if the account is a brand and the shutdown stems from an impersonation/report tangle, you can proceed through the IP channel with trademark registration documents. DSA routes for EU users: users in Europe whose in-platform appeals fail can apply to certified out-of-court dispute settlement bodies under the Digital Services Act; this doesn't apply to users in Türkiye, but note it if you have EU-based business assets.
The hijacked account: a separate, faster path
If your password doesn't work, the email has been changed and the account is spewing spam, don't waste time on appeal forms; use Instagram's hacked flow (instagram.com/hacked): choose the "my account was hacked" path, verify with the original email/phone, and terminate sessions through the security checks. Even when the attacker has swapped the email and phone to make appeals impossible in your name, recovery via the original signup identity usually remains possible. The moment you're back in: change the password, enable 2FA, log out all sessions, clean Apps and Websites — and appeal, one by one via Account Status, the violations generated by whatever the attacker posted.
Scam warning: "account recovery services"
Everyone whose account gets disabled sees the same ads: "we know someone inside Meta, we'll reopen it in 48 hours." Let me be blunt: there is no market of Meta insiders reopening accounts; nearly all of these are scammers who take the payment and vanish — or worse, use the identity documents you hand them to produce a second wave of damage. The "official-looking" recovery offers arriving in your dead account's DMs and your inbox are part of the same ecosystem. There is no legitimate point in this process where you pay anyone — with the sole exception of a Meta Verified subscription, purchased inside the official app.
If it doesn't come back: damage control
Honestly: some accounts don't come back — especially those with repeat-violation histories. At that point the energy has to shift from recovery to rebuilding: the new account is opened with a clean structure (fresh email, verified business, role-based access and a warm-up period from day one); a variation of the old username is claimed and announced through the site and other channels; and this time the entire prevention routine is installed in week one. If an off-platform copy of the audience exists (email list, WhatsApp), rebuilding takes weeks; if not, years. Which brings us back to the thesis of this series: the best recovery process is the one you never need.