X Account Hacked?

Don't panic. Yet. This may take some time. It may fail. But worth a try.

IMPORTANT UPDATE : one of my friends went the letter route - below - a couple of weeks after being hacked. IT WORKED!!!

If it fails or X support is not all we would wish it to be, you can use your downloaded archive to start over, contacting all your Mutuals and asking them to boost you. If you have your archive. If you are in the fortunate position of reading this BEFORE you have been hacked, get it now. See the home page for info.

If You Cannot Log In

Being locked out is the most common scenario after a hack. 1 and 2 are worth a try, it might have just happend and they haven't changed everything just yet. But you'll probably end up at 3.

Step 1: Try the standard password reset first via the X login page using your old email, phone, or username.
Step 2: If the hacker changed your recovery info, you must use X's official compromised account form.
Step 3: Select "I believe my account is hacked or compromised" and fill in the details. Use the original email associated with the account if possible.

X will usually send instructions or verification to your original email/phone. Provide as much proof of ownership as you can (old emails, screenshots of past activity, etc.).

Official X Recovery Form

Report the Hacker

Report the incident through the hacked account form. Mention any suspicious activity or scam posts.
If the hacker is using a fake/impersonating account, report that profile separately for impersonation.

X investigates and can suspend the compromised sessions or the account temporarily to stop abuse. They won't usually share details about the hacker due to privacy rules.

Report Compromised Account

How long does it take to get the account back?

Timelines vary widely depending on the complexity of your situation:

Moderate cases: (Hacker changed some info, but you submit the form) — 1–3 days for a response and recovery.
Difficult cases: (Hacker changed email/phone, no access to recovery methods, or account got suspended) — 3–14 days or longer. Don't give up until you you have done this 5+ times, waiting 2 weeks each time.
Verified or high-profile accounts: Can sometimes take weeks due to extra verification, though X may prioritize them.

Going Legal

If you try many times, and are ignored:

Letter: To their address for legal correspondance for your country. Tone should be reasonable, explaining what happened, please can they fix, or do they need you to get an injunction? (They will probably realise its a cock up and fix, they might want you to injunct, but simple unpoosed ones can be very cheap, esp if you account had business value)
GDPR: You can go this route, asking for everything, and requiring they deal with you by the email address you give them in your GDPR request. HOWEVER how do they know it's you, and not someone trying to hack you? BUT, if they look at the activity- which is probably mad spamming and scamming, maybe common sense will join the chat.

⚠️ IMPORTANT WARNING

Never pay anyone claiming to "hack back" or recover your account for you.
These are almost always scams preying on your urgency. The only legitimate way to recover your account is through X's official support channels.