Common scams on Instagram
On Instagram, scammers usually make contact through a message, a comment or an ad, posing as Instagram itself, a well-known brand or a friend. The end goal is usually the password, a login code or a payment made in advance. The tricks change, but the warning signs stay the same: pressure to act fast, a link, a request for a code and moving the conversation to another app.
In this article
Fake copyright and violation notices
One of the most widespread tricks is a message, or sometimes an email, from an account called “Instagram Support” or “Meta Copyright”: a post supposedly infringes copyright, and unless an appeal arrives within 24–48 hours, the account will be deleted. The “appeal” link leads to a page imitating the Instagram login, which asks for the password and then the two-factor authentication code as well. In 2026 a newer variant appeared: scammers file real but false copyright complaints until the account is temporarily suspended, then demand money in another chat app to withdraw the complaint. Paying is not worth it in this case either, because it guarantees nothing and can lead to further extortion; the official appeal is free.
- A genuine copyright or violation warning appears among the app's notifications and under “Account Status”.
- Instagram's emails come from mail.instagram.com; a similar but different domain (for example, one letter off) points to a scam.
- If the account really has been restricted: Disabled or suspended Instagram account.
“Free blue checkmark” and verification offers
The message promises that the account can get the verified badge (blue checkmark) by simply filling in a form. The form asks for the username, the password and the code received, and sometimes a fee as well. The genuine verified badge comes from a Meta Verified subscription or Meta's own verification; subscribing is only possible inside the app, in Accounts Center, and nobody asks for a password in a message for it.
Giveaways and fake winner notifications
- Copycat account: the scammer copies the profile picture and name of a real giveaway organizer (with one dot or letter different), then sends “congratulations” by message to people who commented under the real post.
- A fee for the prize: the winner has to pay a shipping fee, customs duty or a “verification fee” by card; the card details can then also be used for recurring charges.
- Logging in to claim the prize: the link leads to a login page. A genuine giveaway never requires a password or code.
- Checking: the real organizer announces the winner from its own long-standing account, usually in the post as well.
Investment and “quick money” offers
Ads for cryptocurrency, forex trading or “passive income”, often with a celebrity's picture or after a friendly chat with a stranger. Scammers build trust with screenshots of profits and a fake investment platform; small early gains may even be paid out. When a larger amount is to be withdrawn, they ask for “tax”, a “fee” or an “unlock amount”. Guaranteed high returns, pressure to act fast and being moved to a WhatsApp or Telegram group almost always point to a scam.
Fake online shops
- A sponsored post with branded products at suspiciously low prices, a “clearance sale” or “last items”.
- The account is new, comments are turned off, or only praising, similar-looking comments are visible.
- Orders can only be placed by message, and payment must be made in advance by bank transfer or as a payment to friends, without buyer protection.
- On the profile, “About this account” shows how long the account has existed and how many times its name has changed; frequent name changes and a new account are warning signs.
In a friend's name: votes, codes, help
A request arrives from a friend's account: vote for them in a contest, help them recover their account, or forward a code they “accidentally requested to this number”. The voting link is a page imitating the Instagram login, and the code is actually a reset or login code for the recipient's own account. Anyone who forwards it hands over their own account, and the scammer then sends the same message to the next friends from there. In this case, it is best to ask the friend another way, for example by phone.
Reporting and what to do
- On the suspicious account's profile or in the message, choose the report option from the “…” menu and mark it as a scam. Reports are anonymous.
- Block the sender; it is worth saving a screenshot of the conversation.
- If a password or code has fallen into the wrong hands, change the password immediately and turn on two-factor authentication; if logging in no longer works: Hacked Instagram account: first steps.
- If card details were given or money was transferred, call the bank immediately; a report can also be filed with the police.
If it doesn't work
Does Instagram send messages to users?
It does not notify users of violations, copyright complaints or account deletion by message, and it never asks for a password. These appear under “Account Status” and among the notifications.
Someone is offering to recover a hacked account for a fee. Can they be trusted?
No. “Account recovery experts” and “Meta insiders” typically ask for money, an ID document or a code, and cannot help. The official recovery is free and starts at instagram.com/hacked.
I clicked the link but did not enter anything. Is there a problem?
If neither a password nor a code was entered, the account is usually not at risk. It is worth checking where the account is logged in.
Do similar tricks happen on other services?
Yes, the same patterns spread on Facebook and Messenger too: Common scams on Facebook and Messenger.