Short answer. When an Instagram account is hacked and then disabled, treat it as two problems. First regain access through Instagram's hacked account flow, which can include a video selfie. Then appeal the enforcement and explain that the activity came from the attacker.
Need help applying this to your notice? Request a free written assessment: Instagram case assessment Threads case assessment. We reply within one business day. Paid preparation is quoted separately; the platform decides the outcome.
Recovery first
On the login screen, use the help options for a hacked account. Instagram may send a link to the original email or ask for a video selfie for accounts with photos of you.
Then the appeal
If the account is disabled, use the appeal shown. Explain briefly when you lost control, what the attacker posted and when you regained access.
Lock it down
New password, app-based 2FA, remove unknown linked apps and review Accounts Center for added profiles.
FAQs
How long does the video selfie check take?
Instagram says it can take a few days.
Can I get my username back?
If the account is recovered, the username normally comes with it.
Should I message people offering recovery?
No. Use only Instagram's own routes.
Official sources