Meta’s AI support chatbot now becomes a tool for account hijacking

The AI-supported chatbot introduced by Meta, which was designed to recover locked accounts of Facebook and Instagram users, has now become a major security concern in itself.

According to reports, hackers have started using the same system to hijack accounts. Meta introduced this tool in December 2025 to make account recovery easier, but according to security researchers, it has opened new avenues for hackers.

The research has revealed that this system makes it extremely easy to gain control over Instagram accounts in some cases, even despite two-factor authentication (2FA).

Security experts on X (formerly Twitter) have shared details, screenshots and videos of this hacking method. Hackers instruct the AI ​​chatbot to change the email associated with the account, after which they reset the password and take over the account.

Meta official Andy Stone confirmed that the company is working to resolve the issue and that the affected accounts are being investigated.

Several high-profile accounts have also reportedly been affected by the attack, including former US President Barack Obama’s White House Instagram account.

The incident highlights a serious flaw in Meta’s security system.