Instagram, Facebook or TikTok disabled my account: reasons, appeals and the DSA

You open Instagram, Facebook or TikTok one morning and discover that your account has been suspended, disabled or restricted. A post may have disappeared, access to advertising or earnings may have been cut off, publishing may be blocked, or the entire profile may have vanished. The first reaction is often rushed: repeated appeals, a new account, or messages to unofficial "support specialists". Those steps can make recovery more difficult.

The right response begins with a simple distinction. A content-moderation decision is not the same as an account takeover, loss of access to the recovery email or phone number, or a technical login problem. The Digital Services Act, commonly known as the DSA, gives users specific rights when platforms make certain decisions. It does not, however, guarantee that every account will be restored.

1. Before you appeal, establish exactly what happened

The phrase "they closed my account" can describe several different situations:

1. Content removal: a post, video, comment or advertisement was deleted.
2. Visibility or feature restriction: content is no longer recommended, or you cannot post, comment or use particular tools.
3. Account suspension or disablement: access has been withdrawn temporarily or permanently.
4. Earnings restriction: monetisation or payment functions have been suspended.
5. Security breach: someone else changed the password, email address or phone number, or posted without permission.
6. Loss of recovery details: you no longer have access to the email account or phone number linked to the profile.
7. Age or identity verification: the platform requires verification before restoring access.

An appeal against a moderation decision is not a substitute for the hacked-account process. Likewise, a data-protection request is not a general-purpose profile-restoration button. Use the route that matches the incident you are actually dealing with.

2. What to preserve before taking any action

Before dismissing the notice or submitting your first appeal, preserve the evidence. Take full screenshots rather than tightly cropped fragments. They should show the date, time, username, URL where available, the wording of the decision, the rule cited and every appeal option displayed.

Also save:

1. the platform email or notification, including full email headers where possible,
2. the unique case or reference number,
3. the exact content that was removed, provided you can lawfully retain it,
4. the terms or policy relied on by the platform, together with the date you accessed them,
5. proof that you control the account, such as older emails, advertising invoices or page-administrator records,
6. your earlier messages and every response received.

Do not alter screenshots or create a "cleaner" version later without retaining the original. For serious business or court use, the original file, its metadata, the URL, the sequence of events and the file hash may carry more evidential weight than an image that has passed through editing software.

3. A hacked account and a disabled account are not the same thing

If you see unfamiliar logins, a changed email address, posts you did not publish or messages sent to friends, security comes first. Change the password of the email account linked to the profile, enable two-factor authentication, review active sessions and remove unknown connected apps. Then use the platform's official hacked-account process.

Facebook directs users to facebook.com/hacked, preferably from a device previously used to sign in. Instagram provides the official route at instagram.com/hacked. On TikTok, recovery and security checks are available in the account settings under Security & permissions.

By contrast, if the platform says it imposed a restriction because a law, community standard or contractual term was breached, the issue is the reasoning for, and appeal against, that decision. Both situations may occur together: an intruder posts prohibited material and the platform then suspends the genuine owner. The appeal should explain that sequence and support it with evidence.

4. What reasons the platform must provide under the DSA

Article 17 of Regulation (EU) 2022/2065 requires a statement of reasons when a platform removes or demotes content, restricts its visibility or monetisation, suspends the service or terminates an account because it considers information illegal or incompatible with its terms and conditions. The statement must be provided no later than when the restriction is imposed, where the platform knows the relevant electronic contact details, and must be specific enough for the user to understand what was decided and why.

Depending on the case, the statement should identify the type and duration of the restriction, the facts and circumstances relied upon, whether automated means were used, the legal ground or specific contractual term involved, and the available avenues of redress. A vague message such as "you breached our standards", with no link to particular content or a particular rule, may be insufficient.

The duty to give reasons does not mean that the decision is automatically wrong. Nor does it create a general right to prior warning or automatic reactivation. It means that you must be able to understand the decision and challenge it effectively.

5. The internal appeal and the six-month access period

For decisions covered by Article 20 of the DSA, online platforms must provide an easy-to-use internal complaint-handling system. It must be available electronically and free of charge for at least six months following the user's notification of the decision.

The platform must handle the complaint in a timely, diligent and non-discriminatory manner, and the decision on the complaint must not be taken solely by automated means. This human-oversight safeguard concerns the decision on the appeal; it does not mean that every initial moderation measure must be taken by a person. If the appeal gives sufficient grounds to show that the information was not illegal or contrary to the terms, or that the measure was disproportionate, the decision must be reversed without undue delay.

6. Where to appeal on Facebook, Instagram and TikTok

Facebook: when a personal account has been suspended, the official instruction is to sign in and follow the appeal flow displayed on screen. The help page for suspended or disabled accounts explains that the available period may vary by region. A Page, advertising account or Business Manager account may have a different account-quality or support route.

Instagram: the official guidance for disabled accounts directs users to the review process shown at login. If no disabled-account message appears, the problem may be a login issue rather than a moderation decision. A security breach should be handled through the separate hacked-account route.

TikTok: a banned account receives a notice in the app. TikTok's official guidance on violations and bans says to sign in, open the ban banner, select Appeal and follow the steps. For an individual video, go to Inbox, System notifications, Account updates, open the relevant notice and select Appeal. Account check shows whether login, posts, comments, the profile or direct messages are restricted.

Do not submit the same appeal dozens of times through unrelated forms. Keep the case number, wait for the response within that specific workflow and provide only the information requested. Creating a new account to evade an active restriction may itself be treated as a further breach of the terms.

7. How to write an effective appeal

An appeal does not need aggressive language or a sweeping claim that "I did nothing". It needs to connect the decision to verifiable facts. A practical structure is:

1. Identification: username, account URL, contact email and case number.
2. Decision: date, type of restriction and the exact rule cited.
3. Facts: what was published, by whom and in what context.
4. Ground for challenge: mistaken identification, satirical or journalistic context, a valid licence, third-party compromise, an incorrect age assessment or another specific error.
5. Evidence: concise, legible and relevant files, without unrelated personal data belonging to others.
6. Requested outcome: substantive review with the human oversight required for the appeal decision, restoration of specific content or the account where justified, and a complete statement of reasons.

If the content did breach a rule, a candid and specific explanation may be more effective than denying obvious facts. Where a legal issue arises, distinguish "this is not illegal" from "this does not breach the platform's terms". Platforms may set contractual standards that are stricter than the minimum required by law, provided those standards are applied consistently with the DSA and other applicable law.

8. Download your data, but understand what that does not achieve

If you still have access, request a copy of your data through the platform's tools without delay. TikTok, for example, provides a Download your data function. Preparation may take several days, the file remains available for four days, and the most recent 24 to 48 hours may be missing. In Meta's Accounts Centre, the route is Your information and permissions, followed by Export your information, if access remains available.

Separately, the GDPR provides a right of access to personal data and, subject to conditions, a right to data portability. The European Commission explains that portability applies to data processed by automated means on the basis of consent or a contract and is not unlimited. It does not require the platform to disclose its algorithms, trade secrets or other people's personal data.

An access or portability request does not automatically require the platform to restore an account. It is a separate right that helps you obtain your personal data and information about its processing; it does not overturn every moderation decision.

9. Out-of-court dispute settlement under the DSA

Article 21 of the DSA allows users to take relevant platform decisions to a certified out-of-court dispute settlement body. There is no general prerequisite to obtain a rejection or exhaust the internal complaint process first. You may choose a certified body in any Member State if it covers your type of dispute and language. Check its specific certification scope before submitting a request.

The European Commission publishes the list of certified bodies. A decision must be delivered within a reasonable time and no later than 90 calendar days after receipt of the complaint; highly complex disputes may receive an extension of up to a further 90 days. The process is free or available for a nominal fee to the user. If the user wins, the platform pays all the body's fees and reimburses the user's other reasonable expenses for the procedure. If the user loses, they do not reimburse the platform's expenses unless the body finds manifest bad faith. Check the published charges before applying.

The body's outcome is not, by itself, a court judgment and does not automatically bind the parties. The right to go to court remains intact. Out-of-court settlement is therefore a genuine route to further review, not a guaranteed "unlock".

10. When a complaint to EETT may be appropriate

The Hellenic Telecommunications and Post Commission (EETT) is Greece's Digital Services Coordinator. Its complaint form for intermediary services may be used where there appears to be a breach of a DSA obligation, for example:

1. no statement of reasons was provided, or the statement was inadequate,
2. the reasons are not clear and comprehensible,
3. there is no electronic and free appeal channel,
4. the complaint is not handled in a timely or diligent manner,
5. no information is provided about out-of-court settlement,
6. the terms and conditions are inaccessible or unclear.

EETT supervises compliance with the DSA. It does not generally decide whether every individual post is lawful, replace the courts, or handle every consumer-protection, intellectual-property or personal-data issue. Nor is it a general account-recovery help desk. A complaint should include the decision, the appeal, the response and the evidence showing the possible DSA breach.

11. When the issue concerns personal data

A separate data-protection issue may arise where the platform fails to respond to a lawful access request, retains inaccurate information, refuses portability without justification, uses personal data without a lawful basis, or makes a significant decision based solely on automated processing in circumstances that engage the relevant GDPR rights.

In that situation, first send a clear request to the platform's controller or data protection officer. The response must be provided without undue delay and no later than one month. Where the request is complex or numerous requests have been made, that period may be extended by up to two further months, but the extension and the reasons for it must be communicated within the first month. If no timely and satisfactory response is received, a complaint to the competent data-protection authority may be considered. For a user in Greece, the Hellenic Data Protection Authority provides the official complaint process.

A data-protection authority examines the processing of personal data but does not award compensation; that is a matter for the courts. It is not the correct route where the only complaint is "I disagree with the content rule and want my profile back" and no distinct GDPR issue exists.

12. Business accounts, revenue and provable loss

For a business, creator or self-employed professional, disablement may interrupt advertising, orders, customer communications or content revenue. That does not mean every fall in turnover is automatically compensable. It is necessary to prove unlawful or contractually unjustified conduct, a specific loss and a causal link between the two.

Keep daily sales records, active campaign data, contracts, cancellations, customer messages, analytics from before and after the incident, and evidence of steps taken to mitigate the loss. Do not present all projected future revenue as a certain loss. The legal assessment depends on the platform's terms, the reason for its decision, the applicable law and the evidence.

13. Copyright and impersonation require different routes

If the profile was restricted following a copyright report, the appeal must address the specific work, the rights holder and the licence relied upon. Naming the source is not always equivalent to having permission. Proof of purchase, written permission, Creative Commons licence terms or evidence of a lawful exception should be tied to the exact file.

If someone has created a fake profile in your name, use the platform's impersonation-reporting process. Do not attempt to gain access to the other person's account. Record URLs, usernames, posts, messages and any demand for money or suspected fraud. Extortion, threats, fraud or unlawful use of personal images may also require prompt contact with the competent authorities.

14. How to spot the "I can recover your account" scam

No legitimate adviser needs your password, two-factor authentication code or remote access to your computer in order to "speak to an internal Meta or TikTok team". Warning signs include:

1. payment exclusively in cryptocurrency, gift cards or a direct transfer to an individual,
2. a guarantee that the account will be restored within hours,
3. a demand that you disable 2FA or antivirus protection,
4. a login link on a domain that resembles, but is not, the official domain,
5. claims of a "secret employee" without an official case number.

If you have already shared credentials, change your passwords from a clean device, sign out unknown sessions, notify your bank if you paid money and preserve the messages for a complaint or report.

15. When a lawyer or court protection may be needed

Legal support is particularly valuable where the account is a significant business asset, the loss is substantial and immediately demonstrable, the platform repeatedly disregards DSA procedures, intellectual-property, personal-data or reputational interests are at stake, or evidence must be preserved before it disappears.

A lawyer will consider which company is the correct recipient, which law and jurisdiction apply, whether a formal notice, interim relief or a claim is appropriate, and what outcome is realistic. The DSA does not remove the right to go to court, but court proceedings are not an automatic account-restoration mechanism either. Cost, urgency, evidence and prospects should be assessed before action is taken.

16. A practical checklist from the first notice to further redress

1. Use only the official app or website.
2. Record the full decision, the cited rule, the date and the deadline shown.
3. Distinguish moderation, hacking, login, age-verification and personal-data issues.
4. If compromise is suspected, secure the email account, phone number, password and 2FA first.
5. Download your data while access remains available.
6. Submit one complete appeal through the official flow and keep the case number.
7. Request clear reasons and the human oversight applicable to the decision on the appeal under the DSA.
8. If the process does not work, consider a certified out-of-court dispute settlement body.
9. Complain to EETT only about a specific possible breach of the DSA.
10. Use the GDPR route only for a separate personal-data issue.
11. For business losses, preserve financial records and obtain timely legal advice.

17. Frequently asked questions

Is the platform required to restore my account?

Not automatically. The DSA provides rights to reasons, an internal complaint system and out-of-court or judicial redress. The outcome depends on the facts, the law and the platform's terms.

Can I create a new account while I wait for a response?

Check the terms and the notice. If the new account is created to evade an active restriction, it may attract another restriction and undermine the appeal.

Can EETT order Meta or TikTok to return my profile?

EETT supervises DSA obligations and may handle or forward a relevant complaint. It is not a general body for deciding the merits of every content dispute and is not an account-restoration help desk.

Must the appeal be filed within six months?

For decisions covered by Article 20, access to the internal complaint process must last at least six months from notification of the decision. A shorter operational period displayed by the platform does not restrict that guarantee. Act promptly, retain evidence of the notice and document any denial of access to the process.

Will a GDPR request reactivate the profile?

Not necessarily. Rights of access, rectification and portability concern personal data. Account restoration is considered through the appeal, out-of-court settlement or court process.

Should I pay someone who claims to have "internal access"?

Not without verifiable professional credentials, a written agreement and a lawful service. Never hand over passwords, 2FA codes or remote access. Official platform and DSA appeals do not require those credentials.

18. Official sources and review date

The principal legal and operational information was checked on 23 August 2026 against the following official sources:

1. Regulation (EU) 2022/2065, Digital Services Act.
2. European Commission: user rights under the DSA.
3. European Commission: certified out-of-court dispute settlement.
4. EETT: submitting a complaint about intermediary services.
5. Facebook Help Centre: suspended or disabled accounts.
6. Instagram Help Centre: disabled accounts.
7. TikTok Help Centre: content violations, bans and appeals.
8. TikTok Help Centre: requesting your data.
9. European Commission: data-protection rights for individuals.

Platform screens, menu names and operational deadlines change. Always check the notice displayed for the specific account and keep a copy. This article provides general information and is not a substitute for advice on an individual case.

Updated on 9 September 2026 with artificial intelligence assistance and official-source checks for the revised passages. This article provides general legal information.