Told to “link your email” for an Instagram payment?

Treat the payment as unverified if someone who contacted you through Instagram says you must link or change an email before money can be released. Do not change the email attached to your Instagram account, ship an item, refund an overpayment, or send money to release the payment. Open the named payment provider, bank account, or Instagram order area independently. If the transaction is not there, you have no verified payment.

Here, the supposed buyer means a person who found an item, artwork, or service through Instagram and claims they want to pay you. Asking for the email or username connected to an agreed payment service can be legitimate. Telling you to change Instagram's login or recovery email is not a payment step. A link or email saying payment was sent is still only a claim until the real provider account confirms it.

Use a payment process you control

• Agree on the payment provider before sharing payment details. Use a provider and account you recognize rather than creating an account through a stranger's instructions.
• Open the provider's official app or type its address yourself. Depending on the service, give the customer your payment username, send your own invoice or payment request, or review a provider-generated transfer sent to your account.
• Confirm the sender, amount, transaction type, date, and status inside your account. A DM, email, screenshot, or link is not the transaction record.
• Check any hold, processing fee, seller-protection condition, or fulfillment instruction inside the provider. Legitimate provider fees may be displayed or deducted there; a stranger should not direct you to send money to unlock incoming funds.
• Release the item or service only after the real account shows the transaction and you understand its status. If anything is unclear, contact the provider through its official app or website.

A payment link can be legitimate, but it is not proof of payment

Who creates a legitimate link depends on the service. A seller may send an invoice or checkout link to a customer. PayPal also supports links that a sender can create so the recipient can accept money. According to PayPal's payment-link instructions, those links are created in the PayPal app and the recipient accepts the funds through PayPal. This means a customer-supplied link is not automatically fraudulent—but it still must not be treated as confirmation that you were paid.

Before opening a provider link from a DM, confirm that the service supports that type of send or request link and inspect the exact domain. If you are unsure, ask the sender to use another payment method you already control or contact the provider through its official app or site. After accepting a genuine transfer, confirm the recipient, amount, transaction type, and status inside your account. If the link asks for an Instagram password, email password, one-time code, account-email change, refund, or upfront release fee, stop.

If the sale used Instagram or Meta checkout

A sale discussed in an Instagram DM is not automatically an Instagram payment. If the purchase actually used an eligible Instagram or Meta checkout feature, the order and payment should appear in the official order or payment area available to your account. Availability and protection vary by country and transaction type. A DM or external email does not create an eligible order by itself.

If the email claims to be from PayPal, PayPal says to check your account activity before shipping. A received payment appears in PayPal Activity; the buyer's email is not the record to rely on. For another provider, apply the same verification rule in that provider's official app or site.

If you only shared your email address

Sharing an email address does not by itself give someone your inbox or Instagram account. The immediate risk is what arrives next: a fake payment notice, password-reset attempt, phishing page, or request for a code. Do not sign in through those messages. Open the supposed payment provider yourself and check whether the transaction exists.

Secure the email account if you entered its password anywhere, reused that password on Instagram, approved an unfamiliar sign-in, or see recovery changes you did not make. Otherwise, monitor for suspicious messages rather than assuming the address alone caused an account takeover.

If you changed the email on your Instagram account

Treat an email change requested by a buyer as an account-access incident. Instagram says an email from security@mail.instagram.com may include a way to reverse an unauthorized email change. Use that official message or Instagram's hacked-account help, not a recovery account that contacts you after the scam. The broader Instagram scam and account-recovery guide covers account takeover, suspicious sessions, impersonation, and platform reporting.

If you can still log in, change the password, restore your email and phone details, remove unfamiliar sessions, and turn on two-factor authentication. If you are locked out, use Instagram's official recovery flow. Handle those access steps before continuing the payment conversation.

If you paid a fee, refunded money, or shipped an item

Contact whichever company can affect the real transaction. That may be a bank, card issuer, payment app, wire service, gift card company, crypto exchange, or shipping carrier. Explain that the transfer or shipment was connected to a fake buyer and ask what options remain. Speed can matter, but reversal or interception is not guaranteed.

Do not pay a second fee to release the supposed payment, upgrade a business account, fix a refund, pay taxes, or verify your identity. Those demands extend the same scam; they do not make the original payment real.

How the link-your-email payment scam works

The scam usually begins with someone offering to buy an item, artwork, or service they found through Instagram. They may accept the price immediately and ask for an email address or payment username. That request alone does not prove fraud; the scam becomes clearer when the person follows it with a fake payment notice, account-change instruction, fee demand, refund story, or pressure to release the item without a verified transaction.

The next message may imitate PayPal, Zelle, Cash App, a bank, Meta, or another payment service. It can claim the payment is pending until you upgrade an account, pay a fee, refund an excess amount, click a confirmation link, or provide more information. The FTC describes the broader seller scam: a fake buyer sends a fake payment notification and hopes the seller sends the item before discovering there was no payment.

A second version asks you to add or change an email on Instagram. That is not a payment step. The email attached to an Instagram account is part of account access and recovery. Giving control of it to someone else can help them take over the account.

Where to report or get help

Report the buyer, message, profile, seller, or product inside Instagram. Use Instagram's scam guidance for current platform instructions. If money moved, contact the payment provider or bank first. U.S. consumers can also report the incident through FTC ReportFraud.

If you entered passwords, codes, or financial details, handle the affected accounts before spending time arguing with or investigating the buyer. If you lost Instagram access, use the official recovery process and avoid anyone offering paid recovery in DMs.

Common questions

Does Instagram require linking an email to receive payment?

A buyer does not need control of your Instagram email, a one-time code, or a fee to release money. Legitimate Meta and Instagram payment features can exist and vary by country or use case, but verify them inside the official account—not through settings or links controlled by the buyer.

Can a legitimate buyer ask for my PayPal email?

Yes. A payer may need the email or username associated with the payment service you agreed to use. Share only the payment identifier the provider normally requires—not your email password, Instagram recovery email, code, reset link, or screen recording. Verify the result inside your real payment account before shipping or refunding anything.

Is it safe to accept a PayPal link sent through Instagram?

PayPal supports genuine links for sending and requesting money, so the fact that a link arrived in a DM does not decide whether it is safe. Open PayPal independently, verify the real PayPal domain and transaction details, and confirm the payment in your PayPal account. Do not continue if the link or follow-up message asks for credentials, an Instagram email change, a refund, or money to release the transfer.

Can someone hack my Instagram with only my email address?

An address alone is not a password or code. It can, however, be used for phishing and password-reset attempts. The risk becomes more serious if you enter a password, approve a login, share a code or reset link, or change the recovery email on the account.

Why does the email say I need a business account or processing fee?

That claim creates a reason for you to send money or trust a fake pending-payment notice. Check the real provider account. A fee demand in an unsolicited buyer email does not prove funds were sent.

What if the buyer sent a payment screenshot?

Treat the screenshot as a claim, not a transaction record. Open the real payment account independently and confirm the payment there before shipping, refunding, or handing over an item.