Hacked account recovery
My brother’s Instagram account got hacked few months ago. We regained access through verification selfie and changed the password, but the hacker’s phone number is still the only recovery/contact method linked in Accounts Center.
Now whenever we try to add our own email/number, remove their number, enable 2FA, or log out their device, Instagram sends verification codes only to the hacker’s number. We’re stuck in a verification loop and scared to log out because this is our only active session.
Has anyone dealt with this before? Should we wait a few days so that another option shows up in the verification?? But in that time, can hacker again try to get it back from us?(since he has the number)