The Short Version
A safe account handover means the buyer ends up controlling every recovery path the seller once held — email, phone number, password, and two-factor authentication — while the money sits in escrow until that's confirmed. Change the linked email and phone first, reset 2FA to the buyer's device, then release login. Do it through a platform that holds payment, and neither side has to trust the other on faith.
Why Most Account Sales Go Wrong at the Handover
The deal isn't the dangerous part. The handover is.
Two people agree a price, money changes hands, the seller sends the username and password — and then it falls apart. Either the buyer pays and the seller goes quiet, or the seller hands over login but quietly keeps the recovery email and pulls the account back two weeks later. Both happen in Nigeria every single week, mostly in WhatsApp groups where there's no record and no referee.
The fix isn't trusting nicer people. It's a process where control transfers in a verifiable order and the money is held by someone neutral until it does. Let's walk it exactly.
Before Anything: What Does "Full Ownership" Actually Mean?
Ownership of a social account isn't a title document. It's a set of recovery levers. Whoever holds these can reset the password and lock everyone else out:
A handover is incomplete until all of these move to the buyer. Sending just the username and password is not selling the account — it's lending it. The seller can take it back in sixty seconds.
Step 1 — The Seller Prepares the Account for Sale
Do this before you list, not during a live negotiation.
If the account login is tied to a phone number you can't give up, or an email you've lost, stop and resolve that first. You cannot sell control you don't have.
Step 2 — Lock the Deal Through Escrow, Not Trust
This is the step that makes the rest safe. With escrow, the buyer pays into a neutral hold, the seller sees that payment is secured (but can't touch it yet), and only after the buyer confirms a clean handover does the money release.
On JaraGram's marketplace, the sequence is built in:
If the account isn't what was listed, the buyer opens a dispute and an admin mediates. Compare that to a WhatsApp deal, where your only recourse after a scam is an angry voice note. There's no contest.
Step 3 — Change the Recovery Email (Buyer Does This, With Seller Logged Out)
Once payment is secured and credentials are shared, the buyer takes control of the email first — because email is the master key.
On Instagram and Facebook, Meta sends a security notice to the old contact methods when these change — that's normal. What matters is that the buyer, not the seller, now controls the inbox where reset links land.
Step 4 — Change the Recovery Phone Number and Reset 2FA
The phone number is the second key. Then 2FA seals it.
Insist on an authenticator app over SMS here. SIM-swap fraud is real in Nigeria, and an authenticator app tied to the buyer's phone is far harder to hijack. (We cover this in depth in our two-factor authentication guide.)
Step 5 — Change the Password Last, Then Verify the Lockout
With email, phone, and 2FA now the buyer's, change the password to something new the seller has never seen. Then run the real test:
Only when that lockout is confirmed should the buyer confirm receipt and release the escrow payment.
Special Case: Facebook Pages and Business Assets
Facebook pages don't transfer by password — they transfer by roles. The seller assigns the buyer as a Full control admin, the buyer accepts, and then the seller removes themselves. If the page sits inside a Business Manager, the page has to be moved out or the whole asset reassigned. Skip this and the "buyer" only has borrowed access the seller can revoke. Always confirm the buyer has full admin and the seller has been removed before releasing payment.
Red Flags During a Handover
Walk away — or pause the escrow — if you see any of these:
Frequently Asked Questions
How do I transfer ownership of an Instagram account to a buyer?
After payment is secured in escrow, the buyer logs in and changes the linked email and phone to their own, resets two-factor authentication to their device, then changes the password. The seller then runs a "forgot password" test — every reset link should reach only the buyer. Confirm that lockout before releasing payment.
Do I change the password or the recovery email first?
Change the recovery email and phone first, reset 2FA, and change the password last. Email is the master key — if you only change the password but leave the old email linked, the seller can reset the password and take the account straight back.
How do I transfer a Facebook page I'm selling?
Facebook pages transfer through admin roles, not passwords. Assign the buyer as a Full control admin, have them accept, then remove yourself. If the page is inside a Business Manager, move it out first. Confirm the buyer has full admin and you've been removed before the escrow payment is released.
Is it safe to sell an account through a WhatsApp group?
It's the least safe way. There's no neutral party holding the money, no dispute process, and no record if the deal goes wrong. Most account scams in Nigeria happen this way. Using an escrow marketplace means the payment is held until a verified handover, which protects both sides.
Should I use SMS or an authenticator app for 2FA after the handover?
An authenticator app. SMS two-factor is vulnerable to SIM-swap fraud, which is common in Nigeria. Have the buyer set up Google Authenticator or Authy on their own phone and regenerate backup codes so only they hold them.
*Selling or buying an account? Use JaraGram's escrow so the handover happens in the right order — credentials through an encrypted channel, payment held until the buyer confirms full control.*