YouTube Channel Hacked: What to Do and How to Report It in 2026

22 Steps to Grow from $500 to $10,000 on YouTube.pdf

Download Free Checklist

If your YouTube channel was hacked, start with the Google Account behind it. Every channel belongs to a Google Account, so YouTube can give the channel back only after you can sign in again and the hacker can’t. Then report the hack to YouTube through its hacked channel assistant or Creator Support. YouTube helps only with hacks from the last nine months, so don’t wait.

Our Safety team at AIR Media-Tech handles hacked partner channels, and once YouTube confirms a hack, the strikes and blocks the hacker caused come off in almost every case. It takes from a few days to a few weeks. What you do with the hacker’s videos matters on the way there. YouTube’s cleanup guide says to delete uploads without strikes or claims and to contact YouTube about the ones that have them. The right move depends on the case, so check with our Safety team before you delete anything.

YouTube has one more step. If it suspects a hack, it pauses uploads, live streams, and public posting on the channel for everyone, the owner included, and may set some recent videos to private. The review usually takes up to 24 hours, and the result comes by email.

In this guide:

• Signs your channel was hacked
• Recover the Google Account
• Report the hack to YouTube
• Strikes from a hacker
• How hackers get in
• What to check after recovery
• Starting a new channel
• How our Safety team helps

Here's the order for the first hour after a hack. The device comes first, because if malware stole your session, a new password typed on that same computer can end up with the hacker too.

How to know that your YouTube channel was hacked

Some hacks are loud. Your channel gets renamed, videos disappear, or someone starts live streaming crypto scams. Others are quiet. You keep access for a while, and the hacker changes the recovery email, the AdSense details, or connected apps in the background.

Here’s what to look for.

• You're signed out of your Google Account for no reason.
• The recovery email or phone number has changed.
• Videos, live streams, or posts you didn’t make appear on the channel.
• You get password reset requests you didn’t start.
• YouTube emails you about policy violations on content you didn’t publish.
• Revenue drops suddenly, or traffic looks unusual.

Check your access points.

• Sign in to your Google Account → Security → Your devices → Manage all devices, and look for devices or locations you don’t know.
• Under Recent security activity, check for password resets or recovery changes you didn’t make.

If YouTube paused your channel’s features

Since October 21, 2026, a hack can also show up as a banner in YouTube Studio. When YouTube detects unauthorized activity on a channel, it pauses some features while its teams run a security review. During the review, no one can do the following, the owner included.

• Upload or update videos and Shorts
• Switch videos from Private to Unlisted or Public
• Start a live stream
• Create playlists or add videos to them
• Upload custom thumbnails

YouTube may also set some recent videos to private. The channel stays online, and your other videos stay public. The review usually ends within 24 hours, and the result goes to the channel owner’s email. If YouTube finds no hack, it lifts the limits right away. If it confirms one, the limits stay until you re-secure your Google Account, clean up the changes, and contact YouTube, as its help page on the pause explains. YouTube says you don’t need to act while the review runs, so use that time to check your Google Account from a clean device. 

If any of this looks suspicious, act fast. The earlier you detect a compromise, the better your chance of recovery.

What to do if your YouTube channel is hacked: recover the Google Account first

Every YouTube channel is tied to at least one Google Account, and a hacker who gets into the account gets the channel too. So the first fix happens in your Google Account, not in YouTube Studio.

If you can still sign in

Check which devices are signed in to your account, sign the unfamiliar ones out, and change your password.

1. Go to your Google Account.
2. Click Security in the left panel.
3. Under Your devices, select Manage all devices.
4. Select any device you don’t recognize and click Sign out.

Then choose a new, strong password you haven’t used for this account before. Check the recovery email, recovery phone, and every 2-Step Verification method and passkey on the account. Hackers often add their own so they can get back in, so remove anything you didn’t set up. Google’s guide to securing a hacked account walks through each setting.

If the hacker changed your password, email, and phone

You can still get the account back. Open Google’s Account Recovery Guide and enter the Gmail address the channel used before the hack. These tips from Google’s recovery help make it more likely to work.

• Use a phone or computer you’ve signed in on before, from a place you usually use it. Google trusts familiar devices and networks more.
• Answer every question, even when you’re not sure. A close guess helps more than a skipped field.
• When Google asks for an email where it can reach you, give one the hacker never had access to.
• If one verification option goes to the hacker’s phone or email, choose Try another way until you reach one that’s yours.

Turn on 2-Step Verification, then add a passkey

Once you’re back in, turn on 2-Step Verification if it was off. It’s also one of the requirements for the YouTube Partner Program. Codes by text message are the weakest option, so use an authenticator app or Google prompts instead, and keep the backup codes offline.

2-Step Verification protects the sign-in, but most channel hacks skip the sign-in. Malware copies the session cookie from your browser, and the hacker never sees a second-step prompt. Google’s Threat Analysis Group has tracked campaigns against creators built exactly this way. A passkey or a physical security key makes phishing your sign-in much harder, and a clean device does the rest.

Check and revoke third-party access

Apps you once connected to your Google Account can keep access long after you stop using them. Go to Google Account → Security → Your connections to third-party apps & services and remove anything you don’t recognize or don’t use now.

Watch for:

• Browser extensions that asked for Google permissions
• Automation or “growth” tools you don’t remember authorizing
• Apps with full access to Gmail or YouTube

How to report a hacked YouTube channel, and what the hacked channel form asks for

YouTube’s help page for hacked channels opens with a chat button rather than a form. The hacked channel assistant sits at the top of the page and works in English, Spanish, and Portuguese. Start there if you think your channel was hacked.

There are two more routes. If your channel is in the YouTube Partner Program and you’ve already recovered your Google Account, you can contact Creator Support. If you can’t reach Creator Support, YouTube points you to @TeamYouTube on X. Whichever route you take, YouTube helps only with hacks from the last nine months, because of its data retention policy.

Many creators search for the hacked channel form itself. It isn’t linked on the help page. You get to it through the assistant, Creator Support, or TeamYouTube. Have these details ready before you start.

• Your channel URL and channel ID
• The Google Account email the channel used before the hack
• The date and rough time you lost access
• What the hacker changed, such as the name, handle, avatar, videos, or live streams
• Screenshots of the channel before and after the hack, and every strike email
• Proof the channel is yours. Our Safety team suggests a public Google Drive link with behind-the-scenes footage where your face or voice is clear.

Channels outside the YouTube Partner Program have fewer support routes, so recovery can take longer. Whoever helps you, never send your password or verification codes to anyone, including people who offer recovery help in your DMs.

Strikes from a hacker: what to do with the hacker's videos

One nature documentary channel AIR Media-Tech works with lost everything overnight. Hackers ran crypto scam live streams on it while the owner slept, and YouTube’s systems removed the whole channel for them. It happened just as the channel’s dubbed videos were taking off, with translated views up 420% in a quarter.

Our team didn’t start with an appeal against the removal. It reported the hack to YouTube first and worked with YouTube’s security team to show that the hack caused the violations. The channel came back with all its videos, subscribers, and history.

YouTube’s own rules follow the same order. You can appeal a channel removal after a hack once you’ve recovered your Google Account, and YouTube warns that the appeal may not be accepted if account recovery isn’t complete.

The hacker’s videos need the same care. YouTube’s main page on hacked channels tells you to delete videos you didn’t upload right away, but its cleanup guide adds an exception for videos with strikes. So the videos fall into two groups.

A deleted video keeps its strike, and you can no longer appeal it. You have six months from the day a strike was issued to appeal it, so there’s no need to rush. If you’re not sure which group a video belongs to, ask before you delete it. Our Safety team looks at it case by case.

Once YouTube confirms the hack, the violations usually come off. AIR Media-Tech’s Safety team gets them removed in almost every confirmed case, in a few days to a few weeks.

Keep an eye on the count while you wait. Three strikes in 90 days can get a channel removed, and a hacker who still has access can keep uploading. YouTube’s feature pause now blocks new uploads and live streams on a channel it suspects was hacked, which closes part of that gap.

How hackers get into YouTube channels

In October 2026, Malwarebytes found sites offering YouTube creators an invite-only ad deal with Amazon Music. Each page showed the creator their real channel stats, then asked them to verify the channel with Google before revealing the offer. The verification page was a phishing trap for the Google sign-in. It worked because YouTube had announced a partnership with Amazon in August.

Most hacks AIR Media-Tech’s Safety team sees start in one of three ways.

1. Access the creator gave away. A password or a verification code shared with an editor, a manager, or a growth service.
2. “Advertisers” who ask you to download something. A contract, a product demo, or a media kit that’s really malware. Watch for .exe, .scr, .js, .hta, .vbs, .cmd, and .bat files, often packed in an archive or named to look like a PDF.
3. Unchecked downloads and links. Cracked software, game demos, or a “verify your channel” page.

The second route is the one that gets around 2-Step Verification, because the malware steals the signed-in session rather than the password. Google’s Threat Analysis Group tracked one campaign that sent creators fake offers for software like Luminar, Cisco VPN, and Steam games. It used around 15,000 attacker accounts. Big channels get caught this way too. In 2023, Linus Tech Tips lost three channels to a fake sponsorship PDF. That story and three more are in our list of YouTubers who got hacked and how they got their channels back.

More ways to lock a channel down are in the prevention part of our 3-step emergency plan for a hijacked account.

After recovery: what to check on your channel

Getting back into the account doesn’t prove the hacker is gone. YouTube itself says it can’t always tell whether a hijacker has been removed, so check the channel and the account yourself. 

Start with the cleanup tool in YouTube Studio 

Channel owners and managers can use a cleanup tool in YouTube Studio. It shows up when YouTube has detected unusual activity on the channel. The tool lists the changes; you mark the ones you made, and YouTube fixes the rest, usually within a few hours. You’ll get an email with a link to track the cleanup, and you can edit your review for about 30 days. Changes you mark as unauthorized can’t be undone, so go through the list slowly.

Then check the rest by hand

The tool doesn’t cover everything. If you can’t use it, you’ll do the whole check yourself. Here’s where to look.

Communicating with your audience if the content was compromised

If your channel started posting crypto scams or offensive content during the hack, address it immediately once you regain access.

• Publish a post or a short video explaining what happened.
• Apologize for any inappropriate content published during the breach.
• Assure viewers you're taking steps to secure the channel.

Silence is the worst approach. If you don’t explain what happened, people may unsubscribe or report your channel.

When starting a new channel after a hack makes sense

Starting over can look faster when recovery drags on. Usually it isn’t. A new channel starts with no subscribers, no watch history, and no videos to fill it.

There’s also a rule to keep in mind. While a channel is under a restriction, for example, after YouTube removed it for the hacker’s streams, using another channel to get around that restriction counts as circumvention, and YouTube can remove all your channels for it. Check with YouTube or your partner before you start one.

A fresh start makes sense in two cases.

• The hack happened more than nine months ago, so YouTube can no longer help recover the channel.
• YouTube turned down the recovery after you’d tried every route, including Creator Support or a partner.

How AIR Media-Tech's Safety team helps recover a hacked channel

AIR Media-Tech is an official YouTube partner, and hacked channels are part of our Safety team’s daily work. The recovery itself still runs through Google and YouTube. What a partner adds is a direct line to YouTube’s support and a team that knows which route fits the case.

For a hacked channel, the team’s part looks like this.

You never share your password or verification codes with us. The team works with you and with YouTube, and you sign in to your own account yourself.

For channels in our network, the Safety team also watches for signs of a hack and alerts the creator when it spots them. There’s always a gap between the moment a hack happens and the moment it shows up, so your own checks still matter. Three recoveries the team has handled, including a family channel with 14M+ subscribers, are in our 3-step emergency plan for hijacked channels.

Hack Protection is open to channels from 1,500 subscribers, including channels outside our network.