Meta Ad Account Disabled Due to Unusual Activity: What It Means and How to Fix It

When your Meta ad account is disabled due to unusual activity, Meta's risk systems saw something in your payments, logins or account changes that looks like fraud or a hacked account. It's usually not about your ad creative. Meta says that when it notices unusual activity in a business portfolio, ad account, Page or user account, it may restrict features "while we investigate the issue."

To fix it: secure every profile with access (new password, two-factor authentication, remove unknown users), settle any failed payment, then open Meta Business Support Home, select the restricted account and follow the "What you can do" steps, which may include confirming your identity and requesting a review. Only an admin can request a review.

Below is what Meta actually counts as unusual, the patterns that trip it most often, and a step-by-step fix that doesn't make the flag worse.

What "unusual activity" means to Meta

Meta's article on advertising restrictions lists the situations where it may limit an advertiser. Three of them sit behind most unusual activity notices:

• Meta suspects a business portfolio or business assets "have been compromised or hacked."
• An advertiser doesn't meet Meta's two-factor authentication requirements.
• Meta "notices unusual payment or account activity, high rates of failed payments or disputed payments."

The notice itself is short. Advertisers commonly report a message along the lines of "We noticed some unusual activity, so we've disabled your ad account," with no detail about which activity.

Restricted vs disabled

Unusual activity doesn't always mean a full shutdown. Meta says the temporary restrictions it applies while investigating can include:

• limited ad spending or a lower payment threshold
• loss of access to some payment features
• loss of the ability to add admins, partners or users
• loss of the ability to create new ad accounts

A disabled ad account is the heavier version: ads stop and you can't publish. If your account is limited rather than disabled, read our guide to a restricted Facebook ad account, because the fix is often lighter.

Why Facebook ad accounts get disabled for unusual activity

Meta doesn't publish the thresholds its systems use, and it never will. What it does say is that it watches payment behavior and account security. In practice, the accounts that get this flag usually show one or more of these patterns:

None of these are violations on their own. Plenty of honest businesses do all of them. The problem is stacking several in a short window, which is exactly what a team does during a busy launch.

A real-world example: an agency onboards a new client on Monday. The client's media buyer in another country logs in, the agency adds its own card because the client's card declined, and the budget goes from $100 to $1,500 a day on Tuesday. Every step had a good reason. Together they look like an account takeover.

How to fix a Meta ad account disabled due to unusual activity

Work through these steps in order. Requesting a review before the account is secure and the payments are clean is the most common way to burn one of your limited reviews.

1. Secure every profile with access. Change passwords, turn on two-factor authentication, and check active login sessions for devices you don't recognize. Meta recommends login alerts and its Security Checkup tool.
2. Audit people and partners. In Business Settings, remove users and partners who shouldn't be there. Note anyone added recently.
3. Settle failed payments. If a charge failed, Meta says the account stays disabled until the amount due is paid. Go to Billing & payments, select the ad account, open Payment methods and click Pay now. If it keeps failing, Meta suggests trying again later with a different card.
4. Open Meta Business Support Home on a computer, click the restricted account and read the What you can do section.
5. Complete what Meta asks. That may be confirming your identity, completing verification or securing your account. If you're asked for ID, use a real government-issued document whose name matches your profile. Never send edited or borrowed documents.
6. Request a review if the option is there. You must be an admin. Meta says reviews are typically completed in 48 hours but can take longer.
7. Stop changing things. No new cards, no new admins, no budget changes and no logins from new places while the review is open.

If the review succeeds, turn your ads back on in Ads Manager. Meta doesn't restart them automatically. For a deeper walk through the review screens and what to write, see our Facebook ad account appeal guide. If the trigger was clearly a declined card, our article on a Facebook ad account disabled for a payment issue covers billing in more detail.

If your account was actually hacked

Unusual activity flags are sometimes Meta catching a real takeover. Meta's signs of a hacked account include a changed email or password, a changed name or birthday, and messages or posts you didn't create. For ad accounts, also look for unfamiliar campaigns, new payment methods and spend in currencies you don't use.

In that case, recover the personal profile first through Meta's hacked account flow, then secure the Business Manager, then deal with the ad account. Report any unauthorized charges to your bank as well. When you request the review, say plainly that the account was compromised and what you changed to secure it.

Why teams and agencies hit this flag more often

Solo advertisers log in from one laptop and one city. Teams don't. A brand with an in-house buyer, a freelance designer and an outside agency can easily have five people in three countries touching one ad account in a week, sometimes on shared logins. From Meta's side, that is unusual activity by definition.

The fix is structure, not tricks:

• One person, one profile. Never share a login. Give each person their own access with the role they need.
• Stable working environments. Each profile should be used from a consistent setup, not whatever laptop is nearby. Tools like AdsPower help teams keep each profile in its own separate, persistent browser profile so logins stay consistent.
• Payment discipline. A dedicated card per ad account, billing details that match the business, and someone who owns fixing declines the same day.
• More than one account. If one ad account is under review, campaigns move to another legitimate account instead of stopping.

This is the setup Ad Shield builds: AdsPower configured for your team, 3 Facebook profiles, 3 Business Managers and 10 ban-resistant ad accounts, with a handover walkthrough and support after launch. If you run spend for clients, agency ad accounts sit under an agency structure with higher trust and higher limits than standard accounts. It doesn't make an account immune to Meta's checks. It removes a lot of the messy signals that cause unusual activity flags in the first place, and it keeps you running if one account does get flagged.

What not to do after an unusual activity ban

• Don't hop VPN locations to "refresh" the account. Changing locations is part of what triggered the flag.
• Don't add three cards in an hour hoping one sticks. That's more unusual payment activity.
• Don't open replacement accounts on the same profile and card right away. Meta can restrict assets connected to a flagged one, and its policy treats creating new accounts to repeat violations as evading enforcement.
• Don't hand your login to an "unban" service. Giving a stranger access to an account Meta already thinks is compromised rarely ends well.
• Don't submit altered documents. It turns a fixable flag into a real violation.

If the review fails and you can't find the trigger, step back and look at the whole setup. Our guide on ad accounts disabled for no reason covers the rest of the checklist.