Instagram hacked and sent messages to everyone? What to do next

1. Secure the account before cleaning messages

Change or reset compromised credentials through Instagram, review active sessions and connected access, and enable appropriate account security protections. Cleaning the messages without first stopping unauthorized access can leave the underlying problem unresolved.

2. Identify the affected part of the inbox

Compromise-related spam is often concentrated in recent conversations, but do not assume every message in that period is malicious. Start with a recent range, inspect what was actually sent, and expand only as needed.

3. Review before you unsend

The safest cleanup is selective. A recovery tool should let you preserve legitimate messages while selecting obvious spam, suspicious links, repeated text, or unwanted shared content for removal. DM Rescue separates analysis from removal for exactly this reason.

4. Process the cleanup gradually

DM Rescue processes selected messages sequentially and includes pause/resume behavior. There is no official “safe” automation interval published by Instagram, so conservative pacing should not be presented as a guarantee against platform limits. If the platform signals a limit or temporary restriction, stop and wait rather than forcing more actions.

A practical four-step workflow