Facebook Hacked Recovery Lab: Your First Hour
Friends say you sent them a strange link. Your password no longer works. What do you do first, and what do you do next? Live the first hour after a fictional Facebook takeover and make the calls. Prefer to read first? Start with what to do if your Facebook is hacked.
You are Priya Nair. Your Facebook account has just been taken over: friends say they are getting odd messages from you, and your password no longer works. Across 12 decisions you live the first hour: recover the account, lock the intruder out, warn the people who trust you and avoid the scams that target locked-out owners. Everything here is fictional: the people and every address. Each call is scored 0 to 10 with the official advice behind the reason.
This is the guided version: a yellow flash shows where to click and a bar says what to do. Switch to Free play any time.
GuidedPress the highlighted Start button. You can edit the names above first, or keep the samples.
Make it yours
Replace the sample names so the scenario and the debrief you export are about your organisation.
TL;DRWhat this lab is
5 points
- A scenario lab: a fictional person finds their Facebook account taken over, with friends getting odd messages and a password that no longer works.
- You make 12 scored decisions: where to start recovery, scanning your device, a new password, signing out other devices, two-factor, rogue emails and phone numbers, warning contacts, a recovery scam, reused passwords and reporting. Each is scored 0 to 10 with the reason.
- The advice follows Meta's Help Center (start at the official hacked-account page from a device you have used before) and the US Federal Trade Commission's steps for a hacked account. Menu paths change, so the lab points you to the official help pages rather than quoting menus.
- Free to play. A final score and grade, a shareable scorecard and next-step links. A downloadable debrief is available with a paid plan.
- Defensive and educational only. Every person and address is fictional, and nothing in the lab helps anyone break into an account.
Frequently asked questions
Is this a real hacked account?
No. The person, the friends, the side business and every address are fictional. The steps follow the official advice from Meta's Help Center and the US Federal Trade Commission.
What is the first thing to do if my Facebook is hacked?
Meta's Help Center says to go to its hacked-account page, facebook.com/hacked, from a device you have previously used to log in to Facebook. The lab lets you practise the steps that follow.
Does the lab teach anyone how to hack an account?
No. It contains no attack methods, tools or real websites. It teaches what to do and what to avoid after a takeover, including how to recognise a paid recovery scam.
How is it scored?
Each decision scores 0 to 10 and the final score is the share of the maximum. Every answer comes with a short reason, so you learn why a choice helps or hurts.
Can I download my debrief?
The debrief is shown on the page for free. Downloading it as Word, PDF or Markdown needs a paid plan.
More security tools
The tools people use most on PlayCISO.
Catch injected instructions hiding in content your AI agent should only read.
Score your readiness against the first international standard for AI security threats.
Critical CVEs across 21 major vendors, month by month — and what the 2026 surge means.
Build an ordered ruleset, replay labelled packets and catch shadowed and any-to-any rules.
Self-assess all six Functions, from Govern to Recover, and see your weakest one.
Search 172 threat actors across Microsoft, CrowdStrike, Mandiant and community names.