Locked Out
Protect and Recover Your WhatsApp, Instagram, Facebook, TikTok and X
Lock every account in 15 minutes. Know exactly what to do in the first hour if one is taken. And never pay a "recovery agent" again.
David E. · Helsaverse · helsaverse.com October 2026 · ₦7,500
📅 Facts as of 20 October 2026. Every security setting and recovery step in this book was read on the platforms' own help centres: WhatsApp Help Center, Instagram Help Center, Facebook Help Center, Meta Help Center and Account Recovery Hub, TikTok Support, X Help Center and Google Account Help. Those are marked ✅ Official. Nigerian warnings come from the Nigeria Police Force National Cybercrime Centre (NPF-NCCC), ngCERT and the NCC's CSIRT (ngCERT's telecom-sector partner), also marked ✅. Anything from news reports is marked 🔍 Secondary, and anything nobody could confirm is marked Unverified. Apps rename menus often. If a button isn't where we say, search the app's settings for the feature's name.
Read this first: disclaimers
No recovery promises. Nothing in this book, and nobody else, can guarantee you get an account back. Each platform decides. What this book does is make it much less likely you lose an account, and give you the best official route if you do.
Only the platform can restore your account. We never suggest paying a "recovery agent", "ethical hacker", "Meta insider" or anyone else to get an account back, and we never suggest hacking into anyone's account, including the person who took yours. In Nigeria, unauthorised access to another person's phone, WhatsApp, email or social media account can be a criminal offence under the Cybercrimes Act, as the Inspector-General of Police reminded Nigerians on 15 October 2026 (🔍 as reported by Vanguard; Chapter 13).
This book is not legal or financial advice. If money was stolen, talk to your bank and the police. If you're a business with customer data, talk to a lawyer about your obligations.
No affiliation. Helsaverse isn't affiliated with or paid by Meta, WhatsApp, Instagram, Facebook, TikTok, X, Google, Apple or any company named. Names identify products only.
Clean rules. Helsaverse sells this book through Flutterwave, in naira. This book never presents crypto, betting, gift-card trading, FX trading, "task" apps, MLM or "investment" schemes as a way to earn, and never teaches foreign-account, VPN, borrowed-identity, bought-account or cracked-software workarounds.
Where this sits on the shelf. The Naira Retainer (Chapter 6) covers safe client access for social media managers. Paid to Create and Does It Pay Here? cover earning. This book is about keeping the accounts that earn, and getting them back if they're taken.
Before you start: what this book will do for you
If you've just been hacked, stop reading this page and go to Chapter 8: The first hour. Come back here later.
Still with me? Good. You have time, the one thing every hacked person wishes they'd used.
Here is what I can promise you. By the end of Part Two you'll have locked your email, WhatsApp, Instagram, Facebook, TikTok and X, in about 15 minutes each, with the protections the platforms themselves recommend. You'll know the ten tricks that actually take Nigerian accounts, so you'll see the next one coming. If an account is ever taken, Part Three gives you the platform's own recovery route, step by step, and the exact words to warn your contacts before they send money to a stranger. And Chapter 13 will make you immune to the second scam: the "recovery agent" who turns up in your comments with a 100% guarantee.
What I can't promise is that you'll always get an account back. Nobody can. Only the platform decides. This book makes losing one much less likely, and gives you the best official chance if you do.
The path: Lock → Spot → Recover → Repair. Every worksheet comes with a filled-in sample so you can see what "done" looks like.
You'll see six kinds of boxes:
- 📋 Worksheet: fill this in.
- 💬 Script: copy, adapt, send.
- ⚠️ Red flag: a common trick or mistake.
- 🧮 Illustrative example: a worked example with made-up people. Not a promise.
- 🔍 Confirm this / Unverified: a point we couldn't confirm on an official page, or that changes often.
- 🤖 Try this in Talk: a prompt for Talk to Algorithm Father. Club members get more messages and image upload, so you can share a screenshot of a suspicious message (hide codes and personal details first). You don't need Talk to use this book.
Who this book is for
- Creators, online sellers and small businesses whose WhatsApp, Instagram, Facebook Page, TikTok or X brings in money.
- Social media managers and virtual assistants who look after clients' accounts.
- Parents and older relatives who get "I sent you a code by mistake" messages.
Who it's not for
- Anyone who wants to get into someone else's account, "spy" on a partner or "hack back". This book won't help, and doing it can be a crime.
- Anyone hoping for a secret phone number or insider who restores accounts for a fee. There isn't one. Meta says it has no general public phone number for customer service, and that numbers claiming to be Meta support are potentially scams. ✅
Part One: How accounts fall
Chapter 1: Your account is your shop
At 2:15 p.m. on a Saturday, Amara's phone buzzed with an Instagram email: "Your email address was changed." She was at a wedding. By the time she read it properly at 5 p.m., her skincare page had a new password, a new email, and a story asking her 14,000 followers to "invest ₦50,000, get ₦150,000 back in 48 hours". When a Lagos seller loses her Instagram, she doesn't just lose photos. She loses the 14,000 people who knew where to find her, the DMs from customers mid-order, and, often, the trust of anyone who gets a "send me ₦50,000 urgently" message from her account before she can warn them.
What hijackers want
From the official and police sources, the pattern in Nigeria is clear:
- Your contacts' money. In June 2025 the NPF-NCCC announced it had dismantled a syndicate that hijacked the WhatsApp accounts of prominent Nigerians and used them to ask contacts for money and personal information. Police traced funds across several Nigerian banks and froze "millions of naira". ✅ The police urged citizens to use multi-factor authentication and to stay alert to suspicious messages "even from trusted sources". ✅
- Your audience. A hijacked Instagram or TikTok with followers can be renamed, used for crypto or "investment" scams, or sold.
- Your ad account and Page. A hijacked Facebook profile can be used to take over your business Page or run ads on your card.
- Your one-time codes. ngCERT warned in May 2025 about the Tria Stealer Android malware, spread through fake wedding or event invitations on WhatsApp and Telegram. It intercepts SMS one-time codes to hijack accounts, then uses them for scams. ✅
The good news
Most takeovers need you to do one thing: share a code, click a link, install an app, or reuse a password that's already leaked. The protections in Part Two take about 15 minutes per account and stop most of those tricks.
What a lockdown actually protects
Security features protect an account you still control. WhatsApp says it plainly: turning on security features "can't restore lost access or remove someone who's already using your account". ✅ That's why you lock down before anything goes wrong.
📋 Worksheet 1.1: what each account is worth to you
Account Followers/contacts Earns money? Customers message here? Who else has access? WhatsApp / WhatsApp Business ☐ ☐ ☐ ☐ Facebook profile + Page ☐ ☐ TikTok ☐ ☐ X ☐ ☐ Email(s) behind them — — — Lock down in order of value: the ones that earn first, but email before everything.
Filled-in sample (illustrative): Amara, Lagos (skincare)
Account Followers/contacts Earns money? Customers message here? Who else has access? WhatsApp Business 1,900 contacts ☑ ☑ Sister (linked laptop) 14,000 ☑ ☑ Ex-VA (old password!) Facebook profile + Page 3,200 Page likes ☑ ☐ Page: Amara only TikTok 5,600 ☐ ☐ Nobody X 800 ☐ ☐ Nobody Email(s) behind them — — — IG on old Yahoo she can't open; others on Gmail Her first job: move Instagram to her Gmail and change the password the ex-VA knew.
✅ Do this now. Fill Worksheet 1.1. For each account, open its settings and write down which email and phone number it actually uses. If you can't open one of those emails, circle it; that's your first job in Chapter 3.