Hello everyone,
In early November 2025, three of my accounts (my personal account, a joint testing account with my girlfriend, and a giveaway/spam account used for forum registrations) were disabled simultaneously, and my device was hardware banned.
At first, I didn't understand why. My personal and joint accounts cited "integrity violations," while the giveaway account was already inactive. I appealed for the joint account, but it was immediately permanently disabled. However, my personal account was reinstated 30 minutes after my appeal.
Then I checked the giveaway account and saw it was disabled for CSE. Thinking it was a mistake, I appealed, but it was instantly rejected and permanently closed.
Upon checking the email associated with that giveaway account, I noticed someone had manually tried to freeze and delete the account on the same day. Right after my appeal was rejected, someone changed the email password and locked me out. The password for the disabled Instagram account was also changed, causing me to lose all access.
Context regarding a security breach: The day before this happened, my Trendyol (e-commerce) account was locked for security reasons. I am still receiving login attempts from different countries for a gaming platform linked to my personal email. I previously saw that my email and password had been leaked in a data breach. My main account was safe due to 2FA, but my other accounts didn't have it, which is likely how they gained access.
My questions are: Since the account flagged for the NCMEC report was created on my phone and remained logged in (even in the background), my device ID and IP address will be in the logs.
- What kind of information is included in an NCMEC report?
- If someone accessed my account and intentionally or unintentionally shared messages, calls, "view-once" photos, or videos, can I see the content of these logs to prove it wasn't me?
- I recall the violation reason being "sexual chat and photo sharing involving children."
How can I prepare a defense to clear my name from a situation I have absolutely no connection to? Has anyone dealt with a similar "false positive" caused by a hacked account?
Any help or legal/technical advice would be greatly appreciated.