Suspended account for 1.5 months - Need advice on reinstatement process

[fireStack76]

🏷️ Discussion Type

Question

💬 Feature/Topic Area

Discussions

Body

Hi everyone,
My account (alifhossinsajjad) has been suspended for over 1.5 months due to suspicious activity. I believe my account was compromised during the PolinRider malware campaign in April (my username appears in the affected list).
I have submitted multiple tickets and provided detailed information:

4+ years of legitimate use for learning and personal projects
Ready to enable 2FA, revoke tokens, reset password, etc.
Explained the situation multiple times

However, the support response is still stuck on the same template question. I understand support can be slow, but 1.5 months is quite long for me as this account contains years of my portfolio and projects.
Has anyone faced a similar long suspension and successfully got their account reinstated? Any advice on how to proceed or what more I can provide to support team would be really helpful.
Thank you.

[7vik2005]

Hi,

Yes, several users affected by the PolinRider malware campaign experienced account suspensions and long recovery times, especially when GitHub detected token abuse or suspicious automated activity. In many cases, reinstatement took weeks because the security team performs manual reviews before restoring access.

Since you have already provided detailed explanations, the best thing you can do now is continue replying within the same support ticket instead of opening new ones. Multiple tickets can sometimes slow the process because cases get merged or reset in the queue.

A few things that may help strengthen your case if you have not already provided them:

• Confirm that all devices used with GitHub have been scanned and cleaned
• Mention that you are willing to rotate all PATs, SSH keys, OAuth authorizations, and enable 2FA immediately after restoration
• Provide approximate dates of suspicious activity and clarify which actions were not performed by you
• Mention that the repositories are personal/educational and that you are trying to recover years of legitimate work
• Ask specifically whether the account is under automated abuse suspension or security review, since those are handled differently

Unfortunately, community members cannot directly escalate suspensions, and only GitHub Support can restore the account. However, polite follow-ups every 1–2 weeks within the same ticket are reasonable for long-running cases like this.

Hope your account gets restored soon.

[fireStack76]

Thank you so much for the detailed explanation and advice.
Your response really helped me better understand the situation and the review process.

I truly appreciate your time and guidance. Hopefully my account will be restored after the review.

Thanks again!

[usamasomydev]

I’m facing the same issue for approximately the same time period. I still don’t know when they will respond.

All of my projects are there, and I’m facing problems with old clients as well. I’m completely unable to push, pull, or clone repositories — everything is blocked.

If anyone has any suggestions or knows how to resolve this, that would be really helpful. I already opened a support ticket and explained everything, but I still haven’t received any response.

[fireStack76]

Hi,
I’m really sorry to hear you’re facing the same issue.

It seems like this is not an isolated case, and GitHub support is currently taking a long time to respond to these suspension/compromise-related tickets.

In my case, I have already contacted support and am still waiting for a resolution as well. From what I’ve understood, these cases usually require manual security review, which might be causing the delay.

For now, the only option is to:

Keep the existing support ticket active (don’t open multiple tickets)
Reply politely with any new evidence if available
Wait for manual review from the security team

Hopefully they will respond soon and resolve both of our cases.

If I find any update or useful escalation method, I’ll share it here.