The short answer
If your YouTube channel is hacked, first recover the Google Account linked to it, then review the channel and undo changes with the cleanup tool in YouTube Studio, then turn on 2-Step Verification with a passkey and add recovery options. After that, eligible creators such as Partner Program members can contact Creator Support. Support covers incidents from the past 9 months only.
In the panic of the moment, channel owners write: “my channel was stolen,” “someone hacked my channel, changed its name and started a strange live stream,” and “YouTube closed my channel after the hack, what do I do?” There is no magic step, but YouTube sets a clear order for recovery, and following it is what protects your chances.
What is the first step if my channel is hacked?
The first step is recovering the Google Account linked to the channel, because the channel follows the account. YouTube Help says the order matters: recover the account first, then undo changes to the channel right away to avoid Community Guidelines or copyright strikes, then reduce the risk of it happening again.
| Your situation | What to do |
|---|---|
| You can still sign in | Change your password and run the Security Checkup in your Google Account. |
| You cannot sign in | Use the account recovery page, answer the questions as best you can, then set a strong password you have not used with this account before. |
| The channel has other managers | Ask them to secure their own accounts too. |
How do I get through the Google Account recovery form?
The recovery form works best when you give Google as many familiar signals as possible. These are the official Google tips:
- Answer every question and guess if you cannot remember: a wrong answer does not end the process.
- Use a device, browser and place you usually sign in from, such as home or work.
- Enter the most recent password you remember, or the closest older one, watching upper and lower case.
- Enter an email you added to the account before, and check spam for a message titled “Your Google support inquiry”.
- Google never asks for your password or verification codes by email, phone or message; enter them only at accounts.google.com.
How do I know my channel was really hacked?
Signs of a hack are changes you did not make, videos you did not upload, or notifications of penalties tied to them. Signs YouTube Help lists:
- Changes to the profile picture, description, email settings or the AdSense link.
- Messages sent from your channel without your knowledge.
- Videos you did not upload, which may bring strike notifications.
How do I clean up the channel after recovering the account?
Cleanup is done from the cleanup tool in YouTube Studio on a computer, available to owners and managers; it shows a Start review button when YouTube detects unusual activity. Changes are made within a few hours of submission.
- Open the cleanup tool in YouTube Studio and click Start review.
- Tick the changes you did not make, or click I made all changes if they were all yours.
- Review the proposed actions under How we'll fix this, then click Next.
- Review permissions: who has access to the channel; change roles or remove anyone you do not know.
- Complete the listed steps and click Submit. You receive an email with a link to track the request.
You can edit your review until the date in the email, usually 30 days after submission. Changes you marked as unauthorized cannot be undone.
What do I check by hand if the tool does not appear?
If the tool is not available, review the channel by hand using YouTube's checklist. The most important items:
| What to check | What to do |
|---|---|
| Uploaded videos | Delete what the hacker uploaded if it has no strike or claim. If it does, contact YouTube to start an investigation. |
| Name, handle, picture, banner | Restore each promptly. If you cannot change the name, delete any translations first. |
| Unknown users | Remove their access in YouTube Studio or from the Brand Account. |
| Video privacy | Check that your videos were not switched to hidden or private. |
| Playlists, thumbnails, subscriptions, comments | Review each for unauthorized changes. |
| AdSense and Content Manager | Confirm their settings are still correct. |
| Dashboard | Look for new strikes and contact YouTube if there are any. |
Can I contact YouTube support?
Yes, an eligible creator can contact YouTube support, but with two conditions: being an eligible creator, such as a YouTube Partner Program member, and having recovered the Google Account first. If you cannot reach Creator Support, YouTube suggests asking for help from @TeamYouTube on X. Support covers hacking incidents within the past 9 months only, because of the data retention policy, so the longer you wait, the lower the chance.
What if my channel was terminated after the hack?
If the channel was terminated after the hack, you can appeal once the Google Account is recovered, and you should find an email in your inbox with the appeal details. But YouTube warns the appeal may not be accepted if account recovery is incomplete, so finish securing the account before you submit it.
How do I stop it happening again?
Three things stop a repeat in YouTube Help: a malware scan, 2-Step Verification with a passkey, and an account recovery plan. The page ranks verification methods from strongest to weakest:
- Passkeys: the strongest protection against phishing.
- Physical security keys.
- Google Prompts on your phone.
- The Google Authenticator app.
- Phone codes by text or call, and backup codes: the weakest.
- Turn on Enhanced Safe Browsing in Chrome and use antivirus software; malware comes from links in spam or fake sponsorship emails, untrusted downloads and fake updates.
- Add a recovery phone number and email address.
- Use a different email for your channel than for your other accounts.
- Control who manages the channel with the permissions tool, and do not share passwords.
What should I demand from the YouTube partner managing my channel?
A partner managing your channel carries part of the hacking risk, so demand five standards before granting any access. These are what we regard as the minimum for any serious provider:
- The least access possible: enough for the agreed work, not ownership of the channel.
- A personal account for each team member, no shared account and no shared password.
- 2-Step Verification for everyone with access to your channel, preferably with a passkey.
- Immediate written notice of any unusual activity on your channel.
- A clear contract that defines permissions and who is responsible.
We hold ourselves to these standards when managing our partners' channels. Injaz Digital is an official YouTube partner with over 15 years in the Arab market, over a million videos under our management every month, and offices in Cairo, Dubai and Riyadh. If your channel is linked to us, contact us as soon as you notice any unusual activity.
Why choose Injaz Digital to manage and protect your channel?
- An official YouTube partnership: monetization, rights protection through Content ID and channel optimization, in one place.
- Over 4.1 billion views across partner channels, and over a million videos under our management every month.
- We handle claims and disputes for you, and send you clear regular reports.
- Over 15 years in the Arab market, with offices in Cairo, Dubai and Riyadh.
FAQ
Can a channel hacked over a year ago be recovered?
It may be hard. YouTube says support covers hacking incidents from the past 9 months because of its data retention policy, and may not be able to recover older ones.
Do I contact YouTube support first or recover the Google Account?
Recover the Google Account first. YouTube lets eligible creators, such as Partner Program members, contact Creator Support after recovering the account.
Should I delete the videos the hacker uploaded?
Delete those without a strike or claim. For those with a strike or claim, contact YouTube to start an investigation. Anything that breaks the Community Guidelines should be removed immediately.
What is the best protection for my channel?
2-Step Verification with a passkey, which YouTube calls the strongest protection against phishing, plus recovery options, a malware scan and a separate email for the channel.
