--- title: "Instagram Account Hacked in Kerala: Recovery Under IT Rules" description: "Instagram hacked? IT Rules 2021 route: 7-day grievance, 2-hour impersonation track, 3-hour government-notice takedown and the FIR sections that apply." url: "https://advaslam.com/writing/instagram-hacked-account-recovery-it-rules/" image: "https://advaslam.com/og/writing/instagram-hacked-account-recovery-it-rules.png" --- [Cyber crime & IT Act matters](https://advaslam.com/practice/cyber-crime/) # Instagram or Social Media Account Hacked in Kerala? How to Recover It Under the IT Rules By [**Adv. K J Muhammed Aslam**](https://advaslam.com/profile/) · Advocate, Ernakulam (Bar Council of Kerala) Published 5 September 2026 Your Instagram — or Facebook, X or Gmail — now shows a different email and phone, and the in-app “forgot password” loop fails because the recovery path has been replaced. This is not a help-desk ticket alone; under the **[Information Technology Act, 2000](https://indiacode.gov.in/handle/123456789/496511)** it is commonly **identity theft and personation** (Sections **66C** and **66D**, plus **66**), and under the **[IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 as amended 10 Feb 2026 (in force 20 Feb 2026)](https://egazette.gov.in)** the platform has **time-bound grievance and takedown duties** — including a **2-hour** path where the hijack is used for impersonation. Two tracks filed together — **platform grievance + police complaint** — recover more accounts than either alone. ## Which provisions actually govern an account hijack? | Track | Provision | What it does | Clock | | --- | --- | --- | --- | | **Crime** | **IT Act Sec 66C** (identity theft) | Fraudulent/dishonest use of your **electronic signature, password or any other unique identification feature** | FIR → investigation by Inspector+ (Sec 78) | | | **IT Act Sec 66D** (cheating by personation using computer resource) | Cheating by personation **using a computer resource** — the hacker posting as you | Up to 3 years + ₹1 lakh, cognizable, bailable | | | **IT Act Sec 66** (computer-related offence via 43) | Dishonest access/damage to your computer resource (the account) | Up to 3 years / ₹5 lakh | | | **BNS Sec 308, 318, 351** | Extortion, cheating and intimidation where ransom or fraud follows the hijack | 308: up to 7 years | | **Platform** | **IT Rules 2021 Rule 3(2)** — grievance | Resident Grievance Officer: general **7 days**, unlawful-content **36 hours**, impersonation/morphed/nudity **2 hours** (post-Feb 2026) | From your grievance | | | **Rule 3(1)(d)** — takedown on actual knowledge | **3 hours** for unlawful content from actual knowledge via **court order or authorised government notification** | From order/notification, not from grievance | | | **Rule 4** — SSMI duties (>50 lakh users) | Significant social media intermediaries (Meta, X, Google) must publish monthly transparency reports, enable voluntary user verification, and act faster on impersonation — the route that makes the 2-hour path credible | Continuous | Section 79 IT Act safe harbour for intermediaries depends on due diligence — Rule 3 compliance is that due diligence. ## How should you file the platform grievance so it triggers the 2-hour track? Where the hijack is used to **impersonate you** (posting from your account, DM-ing your contacts), frame the grievance explicitly as **impersonation under Rule 3(2)(b) / Rule 4** — that engages the **2-hour** user-grievance path. Include: 1. **Account identification:** Exact handle/URL (`https://instagram.com/your.handle`), account creation email/phone, and your government ID proof. 2. **Hijack timeline:** Date/time you lost access, the new recovery email/phone showing replacement, and the first impersonation post or DM with **URL** (not just screenshot). 3. **Label the category:** Write “Complaint under **Rule 3(2) and Rule 4** — impersonation / unauthorised access to user account (IT Rules 2021 as amended 10 Feb 2026) — request 2-hour handling as impersonation.” Citing the rule and the time track is not advocacy — it is the correct head for prioritisation. 4. **Preserve for Section 63 BSA:** Export the impersonation post’s URL and metadata; keep the original-device export with hash — see [Section 63 BSA guide](https://advaslam.com/writing/electronic-evidence-bsa-section-63-certificate-guide/). 5. **File in two places:** The platform’s **grievance form + email to the published Resident Grievance Officer** (every SSMI must publish name and contact), and — where the hack is part of a fraud — a parallel **government-notified** track (police or MeitY-authorised agency) is what starts the **Rule 3(1)(d) 3-hour** clock. Your grievance alone does not trigger 3(1)(d). A common failure: reporting via the in-app “Report a problem” with no URL, no impersonation label, and no grievance-officer email — the ticket is then triaged as low priority and the 2-hour path is never engaged. ## How does the police complaint fit — and where do you file it in Kerala? File a **written, signed complaint at the district Cyber Police Station** (every Kerala revenue district has one) or the station whose cyber cell covers the account, citing **IT Act 66C/66D/66** and — where ransom or impersonation harm is made out — **BNS 308/319/351** (and **POCSO** where a minor’s intimate image is involved). Attach: account URL, timeline, the impersonation post URLs, the hijack email/phone change screenshot, and the platform grievance acknowledgement. Request an **FIR under Section 173 BNSS** where cognizable ingredients are disclosed — Lalita Kumari remains the mandatory-FIR rule — and, if the account is used to freeze others’ money, note the **Section 106 BNSS / 503 BNSS** implications for lien. For escalation where a filed NCRP/1930 reference draws no FIR, use the chain in the [NCRP escalation guide](https://advaslam.com/writing/cyber-complaint-filed-no-action-escalation/) — SP/CP written representation → CPGRAMS → Magistrate direction under **Section 175(3) BNSS**. ## What about accounts used to impersonate you rather than hijack yours? Where a **different** account clones your name and photo to scam your contacts, the same **Rule 3(2)(b) 2-hour impersonation** and **Rule 3(1)(d) 3-hour** tracks apply, and the crime sections shift emphasis to **66D** (personation) and **319 BNS** (cheating by personation), plus **66E / 67 / 351** where morphed images are used. File both the **platform impersonation report** (with both URLs — yours and the fake) and the police complaint. Courts in Kerala and the Delhi High Court have granted **John Doe / Ashok Kumar** injunctions and disclosure of subscriber data where impersonation is used for fraud — the written grievance with URLs is the pre-condition for that route. ## What reduces recovery time — a short checklist - **Enable two-factor authentication (TOTP app, not SMS alone)** before hijack, and keep a backup code offline. - **Do not click recovery links sent by the impersonator** — they phish the replacement credentials. - **Keep the original-device proof** — the date your recovery email changed, as recorded on the device and by the platform’s security email, is the best timestamp for the investigation. - **Do not transfer money to the hijacker** for “return” of the account — use the police + government-notified takedown track instead. ## Primary sources - [IT Act, 2000 — Sections 43, 66, 66C, 66D, 69A, 78, 79](https://indiacode.gov.in/handle/123456789/496511) - [IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 as amended 10 Feb 2026 (in force 20 Feb 2026)](https://egazette.gov.in) — Rules 3(1)(d), 3(2), 4 - [BNSS, 2023 — Sections 35, 94, 173, 175, 193](https://indiacode.gov.in/handle/123456789/496550); [BSA, 2023 — Section 63](https://indiacode.gov.in/handle/123456789/496549) - [BNS, 2023 — Sections 308, 318, 319, 351](https://indiacode.gov.in/handle/123456789/496548) FAQ ## Common questions **My Instagram was hacked and the recovery email changed. What is the legal route beyond the in-app form?** Use the IT Rules 2021 legal track in parallel to the in-app recovery. File a grievance with the platform's Resident Grievance Officer under Rule 3(2) (now 7-day resolution; 36 hours for unlawful-content and 2 hours for impersonation/morphed-image cases), provide the account URL, your ID proof, and the hijack evidence. Intermediaries must also remove or disable access to unlawful content within 3 hours of actual knowledge via a court order or authorised government notification under Rule 3(1)(d) (down from 36 hours after the 10 Feb 2026 amendment); the 2-hour removal for non-consensual impersonation is the Rule 3(2)(b) user-grievance track. **Which sections apply when a social media account is hacked?** Commonly: IT Act Section 66 (computer-related offence via dishonest use), Section 66C (identity theft — fraudulent use of your password/electronic signature/unique identifier), Section 66D (cheating by personation using computer resource where the hacker impersonates you), and where ransom is demanded, BNS Sections 308 (extortion) and 351 (criminal intimidation). The IT Rules 3(1)(d) and 4 (for SSMIs) then supply the platform-due-diligence duties. **How long must Instagram or Facebook take to act on my hacking complaint?** Under Rule 3(2) as amended 10 Feb 2026 (in force 20 Feb 2026): general grievances in 7 days (down from 15), unlawful-content grievances in 36 hours (down from 72), and complaints about impersonation, morphed images, nudity or child safety in 2 hours (down from 24). The separate Rule 3(1)(d) clock — 3 hours for unlawful content — runs from actual knowledge via a court order or authorised government notification, not from your grievance alone; the 2-hour impersonation/morphed track is Rule 3(2)(b). File both tracks. **Can I file an FIR for a hacked Instagram account in Kerala?** Yes, where the ingredients of cheating, impersonation, identity theft or extortion are made out — which a hijacked account typically is. File a written complaint at your district Cyber Police Station citing IT Act 66C/66D/66 and BNS 308/318/319, with the account URL, timeline, and preserved screenshots with hash for Section 63 BSA. Cybercrime.gov.in allows confidential filing as well, but the district FIR is what grounds investigation under BNSS. **The hacker is extorting me to pay to get the account back. Should I pay?** No. Payment rarely restores control and funds the next impersonation. Preserve the extortion demand (chat, UPI ID, phone number), file the platform grievance and the police complaint, and let the Rule 3(1)(d) / investigation track operate. Paying also complicates proving extortion under Section 308 BNS. **A note on this article.** It is general legal information, not legal advice. The law may have changed since the date shown; before acting on anything here, take advice on your specific situation from an advocate of your choice. Keep reading Cyber crime & IT Act matters ### Cyber Fraud Defence in Kerala: Freeze to Recovery Hub Answer cyber fraud in Kerala step by step: freeze unfreezing, UPI and task-scam recovery, P2P taint, notices, escalation, evidence, ED and CIBIL sequels. 5 Oct 2026 [Cyber Fraud Defence in Kerala: Freeze to Recovery Hub](https://advaslam.com/writing/cyber-fraud-defence-kerala/) Cyber crime & IT Act matters ### Telegram Task Scam and Online Job Fraud: How It Works and How to Recover Money in Kerala Lost money to a Telegram task or job scam? Why Section 66D IT Act and Section 318(4) BNS apply, why chasing deeper levels hurts, and 1930 and bank steps. 6 Sept 2026 [Telegram Task Scam and Online Job Fraud: How It Works and How to Recover Money in Kerala](https://advaslam.com/writing/telegram-job-task-scam-recovery/) Contact [WhatsApp](https://wa.me/919497240215?text=Hello%2C%20I%20found%20advaslam.com%20and%20would%20like%20to%20discuss%20a%20matter.) [contact@advaslam.com](mailto:contact@advaslam.com) [+91 94972 40215](tel:+919497240215) 3rd Floor, Lalan Towers (KGL Builders), Vanchi Square, High Court Junction, Ernakulam, Kerala 682031 · Monday – Saturday, 10:00 – 18:30 (by appointment) ```json {"@context":"https://schema.org","@graph":[{"@type":"WebSite","@id":"https://advaslam.com/#website","url":"https://advaslam.com","name":"Adv. K J Muhammed Aslam","alternateName":"advaslam.com","publisher":{"@id":"https://advaslam.com/#person"},"inLanguage":"en-IN"},{"@type":"Person","@id":"https://advaslam.com/#person","name":"K J Muhammed Aslam","alternateName":["Adv. K J Muhammed Aslam","Advocate K J Muhammed Aslam","Muhammed Aslam K J","Adv. Aslam"],"honorificPrefix":"Adv.","jobTitle":"Advocate","description":"Advocate enrolled with the Bar Council of Kerala, practising from High Court Junction, Ernakulam: cyber and technology law, data protection (DPDP), business, banking and IPR, and litigation before the High Court of Kerala and the courts at Ernakulam.","url":"https://advaslam.com/profile/","image":"https://advaslam.com/og.png","telephone":"+919497240215","email":"contact@advaslam.com","address":{"@type":"PostalAddress","streetAddress":"3rd Floor, Lalan Towers (KGL Builders), Vanchi Square, High Court Junction","addressLocality":"Ernakulam","addressRegion":"Kerala","postalCode":"682031","addressCountry":"IN"},"alumniOf":{"@type":"CollegeOrUniversity","name":"Bharata Mata School of Legal Studies"},"memberOf":[{"@type":"Organization","name":"Bar Council of Kerala","url":"https://barcouncilkerala.org/lawyer-registry-list"},{"@type":"Organization","name":"Kerala High Court Advocates' Association","url":"https://khcaa.com/"}],"identifier":[{"@type":"PropertyValue","propertyID":"Bar Council of Kerala Enrolment No.","value":"K/001823/2026"},{"@type":"PropertyValue","propertyID":"KHCAA Membership No.","value":"OAJ 358"}],"knowsAbout":["Information Technology Act 2000","Cyber crime law","Technology law and technology contracts","Digital Personal Data Protection Act 2023","DPDP compliance","Data protection and privacy law","Business and commercial law","Contract drafting and negotiation","Banking and finance law","Negotiable Instruments Act cheque dishonour","SARFAESI Act","Intellectual property law","Copyright and trademark law","Patent infringement","GST and income-tax law","Blockchain and cryptocurrency technology","Web3 wallets and NFTs","Drone regulation and DigitalSky framework","Writ petitions under Article 226","Criminal law","Civil and consumer litigation","Family and succession law","Service and labour law","Legal drafting","Mediation and dispute resolution"],"knowsLanguage":["en","ml"],"workLocation":{"@id":"https://advaslam.com/#practice"},"hasCredential":[{"@type":"EducationalOccupationalCredential","credentialCategory":"Enrolment as an advocate","identifier":"K/001823/2026","recognizedBy":{"@type":"Organization","name":"Bar Council of Kerala"},"description":"Enrolled as an advocate with the Bar Council of Kerala (K/001823/2026), 2026"},{"@type":"EducationalOccupationalCredential","credentialCategory":"degree","educationalLevel":"Bachelor","recognizedBy":{"@type":"CollegeOrUniversity","name":"Bharata Mata School of Legal Studies"},"description":"BBA LLB (Hons.), Bharata Mata School of Legal Studies (2025)"},{"@type":"EducationalOccupationalCredential","credentialCategory":"Remote Pilot Certificate","recognizedBy":{"@type":"Organization","name":"Directorate General of Civil Aviation, India"},"description":"DGCA Remote Pilot Certificate, issued 2022"}],"subjectOf":[{"@type":"CreativeWork","name":"Govind Babu v. State of Kerala (Crl.M.C. No. 5640 of 2026, 2026:KER:69496)","url":"https://indiankanoon.org/doc/151180872/","datePublished":"2026-09-10","publisher":{"@type":"Organization","name":"High Court of Kerala"}},{"@type":"CreativeWork","name":"Viji Sagar v. State of Kerala (Crl.M.C. No. 1603 of 2026, 2026:KER:20803)","url":"https://indiankanoon.org/doc/193042273/","datePublished":"2026-03-09","publisher":{"@type":"Organization","name":"High Court of Kerala"}},{"@type":"CreativeWork","name":"Anjana v. Manoharan A.P. (C.R.P. No. 442 of 2025, 2026:KER:10054)","url":"https://indiankanoon.org/doc/68585852/","datePublished":"2026-02-05","publisher":{"@type":"Organization","name":"High Court of Kerala"}}],"sameAs":["https://www.linkedin.com/in/azlubro","https://portal.khcaa.com/advocate?id=10480","https://lexosys.com"]},{"@type":"LegalService","@id":"https://advaslam.com/#practice","name":"Adv. K J Muhammed Aslam — Advocate, Ernakulam","url":"https://advaslam.com","image":"https://advaslam.com/og.png","telephone":"+919497240215","email":"contact@advaslam.com","address":{"@type":"PostalAddress","streetAddress":"3rd Floor, Lalan Towers (KGL Builders), Vanchi Square, High Court Junction","addressLocality":"Ernakulam","addressRegion":"Kerala","postalCode":"682031","addressCountry":"IN"},"geo":{"@type":"GeoCoordinates","latitude":9.9889,"longitude":76.2748},"hasMap":"https://www.google.com/maps/search/?api=1&query=Lalan+Towers+High+Court+Junction+Ernakulam","areaServed":[{"@type":"City","name":"Ernakulam"},{"@type":"City","name":"Kochi"},{"@type":"State","name":"Kerala"},{"@type":"Country","name":"India"}],"openingHoursSpecification":{"@type":"OpeningHoursSpecification","dayOfWeek":["Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],"opens":"10:00","closes":"18:30"},"founder":{"@id":"https://advaslam.com/#person"},"knowsAbout":["Cyber crime and IT Act matters","Data protection and DPDP Act compliance","Business, banking, intellectual property and tax","Legal drafting","Criminal law: bail, quash and appeals","Writ petitions before the High Court of Kerala","Civil, property and consumer matters","Family and succession matters","Service and labour matters"]},{"@type":"BlogPosting","@id":"https://advaslam.com/writing/instagram-hacked-account-recovery-it-rules/#article","isPartOf":{"@id":"https://advaslam.com/#website"},"headline":"Instagram or Social Media Account Hacked in Kerala? How to Recover It Under the IT Rules","description":"Instagram hacked? IT Rules 2021 route: 7-day grievance, 2-hour impersonation track, 3-hour government-notice takedown and the FIR sections that apply.","url":"https://advaslam.com/writing/instagram-hacked-account-recovery-it-rules/","mainEntityOfPage":"https://advaslam.com/writing/instagram-hacked-account-recovery-it-rules/","datePublished":"2026-09-05T00:00:00.000Z","dateModified":"2026-09-05T00:00:00.000Z","keywords":"Instagram account hacked recovery India, social media account hacked legal complaint, IT Rules 2021 grievance officer account hacked, Section 66C Instagram hacked, how to recover hacked Instagram Kerala","inLanguage":"en-IN","author":{"@id":"https://advaslam.com/#person"},"publisher":{"@id":"https://advaslam.com/#person"},"image":"https://advaslam.com/og/writing/instagram-hacked-account-recovery-it-rules.png","about":{"@type":"Service","@id":"https://advaslam.com/practice/cyber-crime/#service","name":"Cyber crime & IT Act matters","url":"https://advaslam.com/practice/cyber-crime/","provider":{"@id":"https://advaslam.com/#practice"}}},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://advaslam.com/"},{"@type":"ListItem","position":2,"name":"Articles","item":"https://advaslam.com/writing/"},{"@type":"ListItem","position":3,"name":"Instagram or Social Media Account Hacked in Kerala? How to Recover It Under the IT Rules","item":"https://advaslam.com/writing/instagram-hacked-account-recovery-it-rules/"}]},{"@type":"FAQPage","mainEntity":[{"@type":"Question","name":"My Instagram was hacked and the recovery email changed. What is the legal route beyond the in-app form?","acceptedAnswer":{"@type":"Answer","text":"Use the IT Rules 2021 legal track in parallel to the in-app recovery. File a grievance with the platform's Resident Grievance Officer under Rule 3(2) (now 7-day resolution; 36 hours for unlawful-content and 2 hours for impersonation/morphed-image cases), provide the account URL, your ID proof, and the hijack evidence. Intermediaries must also remove or disable access to unlawful content within 3 hours of actual knowledge via a court order or authorised government notification under Rule 3(1)(d) (down from 36 hours after the 10 Feb 2026 amendment); the 2-hour removal for non-consensual impersonation is the Rule 3(2)(b) user-grievance track."}},{"@type":"Question","name":"Which sections apply when a social media account is hacked?","acceptedAnswer":{"@type":"Answer","text":"Commonly: IT Act Section 66 (computer-related offence via dishonest use), Section 66C (identity theft — fraudulent use of your password/electronic signature/unique identifier), Section 66D (cheating by personation using computer resource where the hacker impersonates you), and where ransom is demanded, BNS Sections 308 (extortion) and 351 (criminal intimidation). The IT Rules 3(1)(d) and 4 (for SSMIs) then supply the platform-due-diligence duties."}},{"@type":"Question","name":"How long must Instagram or Facebook take to act on my hacking complaint?","acceptedAnswer":{"@type":"Answer","text":"Under Rule 3(2) as amended 10 Feb 2026 (in force 20 Feb 2026): general grievances in 7 days (down from 15), unlawful-content grievances in 36 hours (down from 72), and complaints about impersonation, morphed images, nudity or child safety in 2 hours (down from 24). The separate Rule 3(1)(d) clock — 3 hours for unlawful content — runs from actual knowledge via a court order or authorised government notification, not from your grievance alone; the 2-hour impersonation/morphed track is Rule 3(2)(b). File both tracks."}},{"@type":"Question","name":"Can I file an FIR for a hacked Instagram account in Kerala?","acceptedAnswer":{"@type":"Answer","text":"Yes, where the ingredients of cheating, impersonation, identity theft or extortion are made out — which a hijacked account typically is. File a written complaint at your district Cyber Police Station citing IT Act 66C/66D/66 and BNS 308/318/319, with the account URL, timeline, and preserved screenshots with hash for Section 63 BSA. Cybercrime.gov.in allows confidential filing as well, but the district FIR is what grounds investigation under BNSS."}},{"@type":"Question","name":"The hacker is extorting me to pay to get the account back. Should I pay?","acceptedAnswer":{"@type":"Answer","text":"No. Payment rarely restores control and funds the next impersonation. Preserve the extortion demand (chat, UPI ID, phone number), file the platform grievance and the police complaint, and let the Rule 3(1)(d) / investigation track operate. Paying also complicates proving extortion under Section 308 BNS."}}]}]} ```