Social media users have been warned about the risk of Facebook and Instagram account hacking, with cybercriminals using increasingly deceptive methods to steal login credentials and gain unauthorised access to accounts.

According to a report by ARY News, the National Cyber Crime Investigation Agency (NCCIA) has issued guidance to help protect users against online threats and account compromise.

Security experts have warned that clicking on a malicious link could expose users to account theft, personal data breaches and financial fraud. Once an account is compromised, criminals may also target the victim’s friends and family through fake messages requesting emergency financial assistance.

How Hackers Steal Social Media Accounts

Cybercriminals often create fake websites and pages that closely resemble legitimate Facebook and Instagram login screens. Users who enter their usernames and passwords on these fraudulent platforms may unknowingly hand over their account credentials to attackers.

Suspicious links and misleading messages are also distributed through WhatsApp, Facebook Messenger and other applications. These messages may use attractive offers, urgent warnings or alarming claims to persuade recipients to click without checking the source.

After gaining access to an account, criminals may impersonate its owner and contact friends or relatives to request money under false pretences.

How to Protect Facebook and Instagram Accounts

Users have been advised to follow several basic cybersecurity measures to reduce the risk of account hacking.

Use strong passwords: Create passwords that are difficult to guess and avoid reusing the same password across multiple accounts.

Enable two-factor authentication: Turn on two-factor authentication (2FA) for Facebook and Instagram. This adds an extra layer of protection beyond a password and can help prevent unauthorised access.

Avoid suspicious links: Do not click on links from unknown or unverified sources, particularly messages that create urgency or ask you to sign in to confirm your account.

Never share verification codes: Do not disclose one-time passwords (OTPs), login approval codes or other verification details to anyone, even if they claim to represent a social media platform.

Verify unusual requests for money: If a friend or family member sends an unexpected message asking for financial assistance, contact them through another trusted channel before sending money.

Stay Alert to Online Scams

As social media accounts increasingly serve as channels for personal communication, identity theft and financial fraud, protecting login credentials has become essential.

Users should also review their account security settings regularly and act immediately if they notice unfamiliar login activity, unexpected password changes or messages they did not send.

Following basic security practices can significantly reduce the risk of account compromise and help protect both users and their contacts from online sca