Stories From the Storefront — Part 4 of 4
Marcus ran social media for a mid-size dealership group for four years. He set up the Instagram account himself, back when the GM thought Facebook was still where the leads were. He picked the handle, wrote the bio, uploaded the first hundred posts from his personal laptop, and logged in every morning using his own Gmail address because, at the time, nobody thought to ask whose address that should be.
Four years and 14,000 followers later, Marcus took a job at a competing group across town.
The dealership didn’t think much of it. HR processed the exit, IT deactivated his email, and marketing moved on to the next campaign calendar. Nobody asked who still had the keys to the Instagram account, because nobody realized the keys had ever left the building.
Three weeks later, someone needed to post a service special. They opened Instagram. They didn’t recognize the login. They tried “Forgot Password.” The reset went to Marcus’s personal Gmail — the same one, still active, still his, still checked every day at his new job.
What actually happens when a former employee owns your Instagram account?
This is the part people don’t expect: it’s not a hack. Nothing was breached. Marcus didn’t do anything malicious — he just never handed anything back, because there was never anything formal to hand back in the first place. The account was built on his credentials from day one, and four years of habit is a hard thing to notice until it’s gone.
That’s the quiet danger in dealership social media. The account isn’t owned by the dealership. It’s owned by whoever’s email is attached to it. And that person changes jobs a lot more often than a Facebook Business Manager gets audited.
Once that access walks out the door, a dealership is looking at a few unpleasant options: beg the former employee to hand it back and hope they’re feeling generous, report the account to Meta as compromised and wait weeks for a review that may or may not go your way, or abandon 14,000 followers and four years of reviews, tags, and search history to start a brand-new page from zero — which, to Instagram’s algorithm, looks exactly like a business that didn’t exist yesterday.
Why can’t you just reset the password?
Because the password was never really yours. Whoever controls the recovery email controls the account, full stop. A password reset only helps the person who already owns that inbox. If the account’s identity is tied to a personal email address, the dealership isn’t one login away from control — it’s one polite phone call away, at best, and one lawyer away, at worst.
This is the same story as the review nobody answered and the profile with the wrong hours — a small gap in ownership that nobody notices until it costs something. Except this one doesn’t cost a lead. It can cost the entire account.
How do you get control back?
Sometimes you can. Meta has a process for reclaiming business accounts, and if the former employee is reasonable, a quick handoff solves it in a day. But “sometimes” and “if” aren’t a plan — they’re a gamble a dealership shouldn’t be making with an asset that took years to build.
The real fix isn’t recovery. It’s never being in this position at all.
How does DFM keep this from happening again?
Every account DFM manages for a dealership — Instagram, Facebook, Google Business Profile, all of it — gets set up and verified under the dealership’s own business identity, not an employee’s personal login. Access runs through role-based permissions inside the platform, so adding or removing a team member is a two-minute change in DFM, not a scramble through someone’s old inbox. When a marketing manager leaves, their access leaves with them. The account doesn’t even notice.
That’s the pattern running through all four of the stories in this blog series: the missed review, the abandoned profile, the neglected page, and now the account that quietly belonged to one person the whole time. None of them start as emergencies. They start as small ownership gaps that nobody thought to close. By the time they surface, the cost has already been paid in leads, in trust, or in years of built-up presence.
A digital footprint isn’t just what a dealership posts. It’s who’s actually holding the keys to it. That’s the part worth checking before the next Marcus takes a new job.
This wraps our four-part Stories From the Storefront series. If any of these sounded familiar, it might be worth an audit of who has access to what — before it becomes a story of your own.