Facebook Ad Account Disabled or Restricted: How to Fix It — the Official Appeal Process and Prevention

What kind of restriction is it? Identify it before you fix it

Before you submit anything, find out exactly what has been restricted. Each type is fixed in a different place, and many people waste time appealing the wrong thing.

The most common reasons ad accounts get disabled

Meta doesn't always give a detailed reason, but based on Meta's help pages and real cases, most causes fall into these groups.

• Ads or landing pages that break policy — prohibited or restricted products, exaggerated claims, before-and-after images, or a destination page that doesn't match what the ad promised.
• Payment problems — repeatedly declined cards, an outstanding balance, a cardholder name that doesn't match the account owner, or a card with a dispute filed against it.
• Hacked accounts — someone else got in and created campaigns or changed settings, so the system shut the account to prevent damage.
• Suspicious logins — logging in from several countries or devices within a short time, especially on newly created accounts.
• Circumventing systems — for example, creating a new account to replace a disabled one, cloaking the ad's destination, or using someone else's account.

How to request a review through the official channel

The channel Meta provides for requesting a review is Business Support Home (Meta's business help centre), which includes the account status page, also known as Account Quality. You can reach it from Meta Business Suite or directly at business.facebook.com/accountquality.

Once your account is working again, review your campaign structure and audiences before launching new campaigns so everything is set up systematically. Read the basics in How to run Facebook ads.

1. 1Go to Business Support Home using a profile that is an admin of the account or business portfolio, because only admins can request a review.
2. 2Open the Account status overview and check whether what is restricted is your profile, an ad account, a Page or the business portfolio.
3. 3Click the restricted asset, read the reason the system gives, and check the timeframe in which you can still request a review.
4. 4Fix the root cause before submitting — for example, remove or edit ads that broke policy, pay any outstanding balance, update your payment method, or turn on two-factor authentication.
5. 5Under "What you can do", choose Request review and follow the steps the system asks for, which may include verifying your identity.
6. 6Wait for the result on the same page. In the meantime, don't submit again and don't open a new account as a replacement.

What to prepare before you request a review

One complete submission beats several rushed ones. Get these ready first.

If you are not sure whether your landing page has anything that might break policy, read about building a page that stays consistent with your ads in What is a landing page.

• Be able to verify your identity — a national ID card or government document with a name matching your Facebook profile, if the system asks for it.
• Turn on two-factor authentication (2FA) for both your personal profile and your business portfolio. An authenticator app is more secure than SMS.
• A payment method in good standing — no outstanding balance, a cardholder name that matches the account or business owner, and no open disputes.
• Rejected ads fixed or deleted, and a landing page consistent with the ad copy, with clear contact details and policies.
• Verifiable business information — if you have completed Business verification and domain verification, it helps make the account as a whole look more trustworthy.

If the cause is a hacked account

A common case in Thailand is an account that gets hacked and then used to run ads on your card, after which the system disables the ad account. If that is what happened, you need to secure the account before you appeal.

1. 1If you can still log in, change your password immediately, then check the list of logged-in devices in Accounts Center and log out any you don't recognise.
2. 2If you can no longer log in, go to facebook.com/hacked to start Meta's account recovery process.
3. 3Turn on two-factor authentication and check that the email and phone number on the account are still yours.
4. 4Go to Business settings and remove any admins and partners you don't recognise from your business portfolio, ad accounts and Pages.
5. 5Check your payment methods, remove any cards that aren't yours, and contact your bank to block or dispute transactions you didn't make.
6. 6Once the account is secure, request a review of the ad account through Business Support Home following the steps above.

Beware of "unban" services, and what not to do

The moment you post in a group that your ad account has been disabled, people will message you offering "100% guaranteed unban" or claiming to have "someone inside Meta". Almost all of these are scammers. Meta has no secret channel that lets outsiders unlock accounts on your behalf.

The damage isn't limited to the service fee. Many of them ask for your password, 2FA codes, or to be added as an admin on your business portfolio, which amounts to handing over your account and the card linked to it.

• Never give your password or verification codes to anyone, whether or not they claim to be Meta staff.
• Don't click "appeal" links sent by chat or email that don't come from a Meta domain. Always go through Business Suite yourself.
• Don't buy someone else's ad account or profile to use instead. It breaks Meta's terms and risks the whole lot being shut down together.
• Don't keep submitting review requests over and over. Submitting multiple times doesn't make it faster.

Checklist to stop your ad account being disabled again

Prevention is always cheaper than recovery. These steps don't guarantee your account will never have problems, but they greatly reduce the risk from the most common causes.

That last point is one many ad teams overlook. If your team works from different homes in different provinces on mobile data whose IP changes constantly, the platform keeps seeing logins from new locations and asks for identity checks more often. Some teams therefore use a VPS with a static IP as a shared team workstation so their access history stays steadier. But understand that a VPS only helps with consistency: it doesn't save an account that breaks policy, and it isn't a tool for evading checks. For details on what a VPS can and can't actually do, read VPS for media buyers.

1. 1Turn on 2FA for every profile with access to the business portfolio, and enforce 2FA at the portfolio level.
2. 2Grant only the access people need, separate admin roles from advertiser roles, and review the list of people with access every month.
3. 3Read Meta's Advertising Standards before advertising products in tightly controlled categories such as health, beauty and finance.
4. 4Keep your landing page clean and consistent with the ad, with contact details and a privacy policy, and no redirects elsewhere.
5. 5Use a payment method in the same name as the business owner, and make sure there is never an outstanding balance.
6. 6Complete business verification and domain verification in Business Manager.
7. 7Access your accounts from consistent devices and locations, rather than bouncing between several countries in a single day.