How to protect yourself against phishing on Instagram

What is phishing?

Phishing is an attempt by another person to access your Instagram account by sending you a suspicious message or link requesting your personal information. Such messages may also contain statements that your account will be blocked or deleted if you do not follow the instructions.

If scammers get access to your account, they can use it to send spam, demand a ransom (in our experience, scammers have received money from their victims more than 10 times without giving them access to the account), or resell it.

Example:

Anna gets an email saying her Instagram account is infringing and she has 24 hours to click on the link and file an appeal. The email contains a link to a website, which by going to and entering her details Anna will, in fact, hand over data from her Instagram to fraudsters.

It looks like my account has been phished. What should I do?

If you accidentally entered your username or password by clicking on a suspicious link, another person could gain access to your account. Here are some possible actions.

If you're able to log in to your account, reset your password by logging out on someone else's device.

If you cannot log in to your account and your password or username does not work, you need to restore your account.

You can report a suspicious email at any time to phishing@instagram.com, there is a small chance this will help.

How do I avoid phishing? Be careful with suspicious emails and messages.

Don't trust emails demanding money, offering gifts, or threatening to delete or block your Instagram account. Emails from Instagram and Facebook about your account only come from @mail.instagram.com and @facebookmail.com.

Don't click on suspicious links.

If you receive a suspicious email or message purportedly from Instagram, do not open any links or attachments in it.

Do not reply to such emails.

Don't reply to emails asking for your password, national insurance number, or your credit card details.

Set up notifications.

Turn on two-factor authentication as an added security measure.

If you do get in trouble - never pay fraudsters!

Actual articles

All articles