An Instagram scam is more serious if you entered a password, shared a one-time code, sent money, gave payment or identity details, or lost access to your account. If you only received a strange DM, comment, follow, tag, or offer, stop replying, avoid the link, save anything you may need as evidence, and report or block the account inside Instagram.
Start with what changed. A suspicious message is not the same as an account takeover. Clicking a link is not the same as typing your password into a fake login page. Sending money is a payment issue first, even if the scam began in Instagram DMs.
Do this first
- Stop replying before the conversation turns into a code request, payment request, private-photo threat, or off-platform chat.
- Do not use links, appeal forms, QR codes, phone numbers, or support accounts sent in the message.
- Save screenshots before blocking or deleting, especially if money, threats, impersonation, seller details, or account access are involved.
- Handle money, passwords, codes, identity details, or account recovery before arguing with the account that contacted you.
What happened on Instagram?
Use the closest match first. If more than one thing happened, start with money, account access, or identity exposure before reporting the account that contacted you.
You only received a suspicious DM, comment, tag, follow, or offer
Lower riskThe contact may be manipulative, but your money, identity, and account are usually not exposed just because a message arrived.
Do not click, send a code, pay a fee, or move to another app. Save a screenshot if the message is threatening, targeted, or impersonating someone, then report and block inside Instagram.
- If it came from a friend, verify through another channel before trusting it.
- If it claims to be Instagram or Meta support, check Instagram directly instead of replying to the DM.
Do not: prove you are real by sending a code, screen recording, ID image, password reset link, or selfie video.
You clicked a link but entered nothing
Check closelyA click by itself does not mean your Instagram account or phone was taken over. Risk rises if you typed information, approved a prompt, downloaded something, scanned a QR code, or installed an app, extension, or profile.
Close the page, do not go back through the same link, and check for downloads, browser permissions, unfamiliar apps, login alerts, and posts or messages you did not send.
- If nothing was entered and nothing downloaded, monitor the account instead of assuming the device is hacked.
- If a file, app, extension, or configuration profile was installed, treat it as a device or account-security issue.
Do not: reset the whole phone just because a link opened.
Phone or account concernsYou entered your Instagram password, code, backup code, or reset link
UrgentPasswords, one-time codes, backup codes, and reset links can let someone sign in, change recovery details, lock you out, or use your account to message your followers.
Change your Instagram password from the real app or website, secure the email account tied to Instagram, remove unfamiliar sessions, turn on two-factor authentication, and change the same password anywhere else you reused it.
- If you are locked out, use Instagram's hacked-account recovery flow.
- If you got an email saying your Instagram email address changed, use the official reversal option in that email if it is available.
Do not: send another code because the person says the first one failed.
Fake login and phishing helpYou sent money, paid a seller, or paid a fee
Act quicklyInstagram may be able to act on an account, seller, message, ad, or eligible in-app order issue. Money sent outside Instagram usually has to be handled with the bank, card issuer, payment app, wire service, gift card company, exchange, or wallet provider.
Save the profile, messages, listing, receipt, payment record, transaction ID, recipient details, wallet address, or tracking information. Contact the payment provider immediately and ask what can still be stopped, disputed, frozen, or reported.
- If the purchase stayed inside Instagram checkout or Meta Pay, check Instagram order support.
- If you paid outside Instagram, start with the payment provider, not the Instagram account.
Do not: send a recovery fee, release fee, tax, verification fee, shipping fee, or second payment to unlock the first one.
Zelle scam payment guidanceYou shared personal, card, bank, login, or identity information
Act quicklyThe next step depends on what information was exposed. A public handle is different from a card number, bank login, Social Security number, ID image, selfie with ID, password, or recovery code.
Contact the relevant bank, card issuer, payment app, phone carrier, email provider, or account provider. If sensitive identity information was exposed, use IdentityTheft.gov for situation-specific recovery steps.
- Watch for unauthorized charges, new login alerts, account-recovery changes, or new accounts opened in your name.
- Change any exposed passwords and secure the email account used for resets.
Do not: post full screenshots of cards, IDs, codes, private addresses, or account details in public help threads.
If a scammer has your informationSomeone is impersonating you, a friend, a brand, or Instagram support
Check closelyImpersonation is often used to make a phishing link, fake giveaway, fake shop, romance approach, or account-recovery pitch look legitimate.
Save the handle, profile URL, screenshots, messages, posts, product pages, or payment requests. Report the impersonating account in Instagram and warn close contacts through another channel if the fake account is messaging them.
- If the account is pretending to be you or your business, use Instagram's impersonation reporting route.
- If the account also sells products or sends payment links, report the profile and the specific posts, messages, products, or seller details.
Do not: send ID documents, money, or codes to a DM account that claims it can verify or restore you.
Your Instagram account was taken over
UrgentA takeover can lead to changed recovery details, scam DMs to followers, fake giveaways, crypto posts, impersonation, ads, or follow-up recovery scams targeting you afterward.
Use Instagram's hacked-account recovery flow. If you can still log in, change the password, secure the connected email, remove unfamiliar sessions, review linked accounts, and warn followers from a separate trusted channel if needed.
- Look for changed email, phone, username, bio links, linked accounts, posts, stories, ads, and messages.
- Keep any case numbers or emails from Instagram, banks, payment apps, FTC, IC3, or local police.
Do not: pay a stranger, Telegram account, hacker, or un-ban service to recover the account.
Account and phone security concernsIf account access may be exposed
Treat passwords, one-time codes, backup codes, login approvals, reset links, and email-change alerts as account access. A scammer may use them to change recovery details, add their own two-factor method, message your followers, or make the next scam look like it came from you.
- Change your Instagram password from the real app or by typing instagram.com yourself.
- Change the same password anywhere else you reused it.
- Secure the email account connected to Instagram. Email is often the account-recovery control point.
- Review login activity, active sessions, linked accounts, phone numbers, emails, two-factor settings, bio links, posts, stories, ads, and DMs.
- Turn on two-factor authentication with an authenticator app when possible and save backup codes privately.
- If you cannot log in, use Instagram hacked-account recovery instead of a paid recovery account.
- If Instagram emailed that your account email changed, look for the official reversal option described in Instagram's email-change help.
If money or a seller purchase is involved
Money changes the priority. Save evidence first, then contact the provider that can actually touch the transaction. Instagram may be able to act on an account, seller, ad, message, or eligible in-app order issue, but it usually cannot reverse money sent through a bank, card, payment app, wire service, gift card, or crypto transfer outside Instagram.
- Instagram checkout, Meta Pay, seller, or product issue: report the seller or product in Instagram and check order support if the purchase used an eligible in-app checkout process.
- Credit or debit card: contact the issuer and ask about a dispute, reversal, card replacement, and account monitoring.
- Bank transfer or wire: contact the bank or wire service immediately and ask what can still be stopped, recalled, reversed, or documented.
- Payment app or Zelle: report the transaction inside the app or through the connected bank or credit union. Save the recipient details.
- Gift card: contact the gift card company, keep the card and receipt, and ask whether funds can be frozen.
- Cryptocurrency: contact the exchange or wallet provider used to send it and save wallet addresses, transaction hashes, screenshots, and platform names.
If the deal was a stranger-to-stranger sale, use the marketplace scam guidance. If the payment was Zelle, use Zelle scam payment guidance. If the pitch was a crypto, forex, trading, money-flipping, or fake-platform offer, use crypto scam guidance.
If someone is impersonating you, using your photos, or threatening you
Save the account URL, handle, profile image, bio, posts, stories if visible, messages, links, and payment requests before reporting. If the account is pretending to be you, someone you represent, or someone you know, use Instagram impersonation reporting and warn close contacts through another channel if the fake account is messaging them.
If someone is threatening to share intimate images, stop paying or bargaining, preserve evidence, report the account or content, and get trusted help quickly. For images or videos taken when someone was under 18, NCMEC Take It Down is the official resource to review. If anyone is in immediate danger, contact local emergency services.
Where to report or get help
Use the report route closest to the thing that happened. Reporting only the profile may miss the specific message, seller listing, comment, post, ad, or impersonation detail that explains the scam.
- Scam DM or chat: use Instagram's route to report a message or chat.
- Lost access or changed recovery details: use Instagram hacked-account help.
- Fake profile or impersonation: use Instagram impersonation reporting and report the specific account.
- Seller, product, or shopping issue: use Instagram seller and product reporting and contact the payment provider if money moved outside Instagram.
- Payment or personal information exposure: use the FTC steps after a scam to choose the right provider contact.
- U.S. consumer fraud: report broader fraud to FTC ReportFraud. For internet-enabled fraud, account takeover, larger losses, crypto, or organized online fraud, use FBI IC3.
Menu names can change by app version and account type. If the exact label is different, choose the route that reports the account, message, seller, product, ad, or content most directly tied to the scam.
Evidence to save before blocking or deleting
Keep a private copy. Profiles, stories, ads, and messages can disappear, especially after a scammer realizes you are saving details.
Account and profile details
Handle, display name, profile URL, profile photo, bio, follower clues, linked sites, and screenshots showing impersonation or fake support claims.
Messages, comments, and posts
DMs, message requests, comments, tags, story screenshots, reels, posts, ads, captions, deleted-message notices, and the date and time you saw them.
Links and forms
URLs, shortened links, QR codes, fake login pages, fake order pages, fake appeal forms, and any email address or phone number used outside Instagram.
Payment records
Payment method, amount, date, time, recipient details, transaction ID, wallet address, transaction hash, receipt, charge, order number, shipping details, and refund promises.
Account-security records
Login alerts, password reset emails, email-change messages, two-factor changes, active sessions, unfamiliar devices, posts or messages sent from your account, and recovery case numbers.
Identity exposure
A note of what was shared, such as card details, bank details, address, phone, ID image, SSN, school or workplace details, or private photos. Do not store passwords, codes, or full ID images in public reports.
Redact full card numbers, bank numbers, private addresses, identity documents, passwords, backup codes, and one-time codes before sharing screenshots with anyone other than the official provider that needs them.
Common Instagram scam patterns
The wording changes, but the request usually points to one of a few outcomes: login access, a code, money, payment details, personal information, intimate images, or influence over your followers.
Pattern
Fake Instagram, Meta, copyright, verification, or account-warning message
What it is trying to get
Your password, code, backup code, or reset link
First move
Do not use the DM link. Open Instagram yourself and review account status or recent emails.
Pattern
Hacked friend asks you to vote, help recover an account, or send a code
What it is trying to get
A reset link or one-time code for your account
First move
Verify with the friend outside Instagram and do not send codes.
Pattern
Giveaway, prize, free item, or influencer impersonation
What it is trying to get
A fee, card details, login details, or personal information
First move
Check the brand or creator through an official website or verified channel before paying or entering details.
Pattern
Brand ambassador, collab, modeling, or sponsorship offer
What it is trying to get
Shipping fees, product purchases, account access, or a fake-check setup
First move
Do not pay to work. Verify the business outside Instagram before buying anything.
Pattern
Instagram shop, seller, or ad with a very low price
What it is trying to get
Payment outside safer checkout, card details, or personal information
First move
Save the listing and check whether the payment stayed inside Instagram or left the platform.
Pattern
Romance, friendship, sugar daddy, military, or oil-rig story
What it is trying to get
Money, gift cards, crypto, secrecy, or identity details
First move
Do not send money to someone you only know through Instagram.
Pattern
Crypto, forex, trading, investment club, or money-flipping pitch
What it is trying to get
Transfers to a fake platform, wallet, exchange, or payment app
First move
Treat guaranteed returns and secret investment help from a DM as unsafe.
Pattern
Blackmail, sextortion, or threats involving photos
What it is trying to get
Money, silence, more images, or control over your contacts
First move
Stop paying or bargaining, save evidence, block or report, and get trusted help quickly.
Pattern
Account recovery, un-ban, verification, or hacker-for-hire service
What it is trying to get
Upfront fees, login details, ID images, or access to your account
First move
Use Instagram's official recovery process and avoid paid recovery DMs.
| Pattern | What it is trying to get | First move |
|---|---|---|
| Fake Instagram, Meta, copyright, verification, or account-warning message | Your password, code, backup code, or reset link | Do not use the DM link. Open Instagram yourself and review account status or recent emails. |
| Hacked friend asks you to vote, help recover an account, or send a code | A reset link or one-time code for your account | Verify with the friend outside Instagram and do not send codes. |
| Giveaway, prize, free item, or influencer impersonation | A fee, card details, login details, or personal information | Check the brand or creator through an official website or verified channel before paying or entering details. |
| Brand ambassador, collab, modeling, or sponsorship offer | Shipping fees, product purchases, account access, or a fake-check setup | Do not pay to work. Verify the business outside Instagram before buying anything. |
| Instagram shop, seller, or ad with a very low price | Payment outside safer checkout, card details, or personal information | Save the listing and check whether the payment stayed inside Instagram or left the platform. |
| Romance, friendship, sugar daddy, military, or oil-rig story | Money, gift cards, crypto, secrecy, or identity details | Do not send money to someone you only know through Instagram. |
| Crypto, forex, trading, investment club, or money-flipping pitch | Transfers to a fake platform, wallet, exchange, or payment app | Treat guaranteed returns and secret investment help from a DM as unsafe. |
| Blackmail, sextortion, or threats involving photos | Money, silence, more images, or control over your contacts | Stop paying or bargaining, save evidence, block or report, and get trusted help quickly. |
| Account recovery, un-ban, verification, or hacker-for-hire service | Upfront fees, login details, ID images, or access to your account | Use Instagram's official recovery process and avoid paid recovery DMs. |
A familiar logo, real-looking profile, large follower count, or paid ad does not prove the request is safe.
Use the more specific next step
Instagram may be where the scam started, but the safest next move often depends on what the scam touched.
Fake login, suspicious link, QR code, password, or one-time code
Move from Instagram-specific reporting to phishing and account-access response steps.
Phishing messages and fake login linksPhone, browser, app, profile, extension, or account-change concern
Check the signs that matter before assuming the whole phone is hacked.
Phone hacked or account concernPersonal, financial, login, ID, or private information was shared
Prioritize the information that creates the highest risk and contact the relevant provider.
Scammer has my informationZelle was used, requested, or shown in fake payment proof
Zelle questions depend on whether you sent money, received fake proof, or saw an unauthorized transfer.
Zelle scamsThe Instagram contact became romance, secrecy, emergencies, money, or crypto
Romance scams need careful handling, especially when secrecy, emergencies, crypto, or family concern are involved.
Online romance scamsThe pitch involved crypto, forex, trading, money flipping, or a fake dashboard
Treat the dashboard, screenshots, testimonials, and withdrawal fees as part of the investment-scam pattern.
Crypto scamsA seller, buyer, shipping story, refund, or no-delivery issue dominates
Handle the purchase, payment method, seller proof, shipping story, and refund limits.
Marketplace buyer and seller scamsThe message is a job, modeling, creator, brand ambassador, or task offer
Upfront fees, fake checks, training costs, direct deposit forms, and equipment purchases can turn a DM into a job scam.
Fake job offers and recruiter scamsYou handled the incident and want prevention habits for later
Prevention fits best once the immediate incident is handled.
Social media scam safetyCurrent context for 2026
FTC data published in April 2026 says people reported losing $2.1 billion to scams that started on social media in 2025. Shopping scams were the most reported social-media scam category, investment scams accounted for more than half of reported losses, and nearly 60% of people who reported losing money to romance scams in 2025 said the scam started on social media. The FTC specifically named Facebook, WhatsApp, and Instagram in that analysis.
Meta also said in March 2026 that it removed over 159 million scam ads and took down 10.9 million Facebook and Instagram accounts associated with criminal scam centers in 2025. Those numbers do not prove that any one message in your inbox is a scam. They do explain why Instagram scams now show up through ads, DMs, comments, hacked accounts, fake brands, fake support, romance approaches, and investment pitches. Judge the request by what it asks you to do.
FAQ
Can clicking an Instagram scam link hack my account?
A click alone is usually not the same as an account takeover. The risk rises if you entered your Instagram password, shared a code, approved a reset link, downloaded something, installed an app or extension, or granted a permission. Check for account changes and handle the specific exposure.
What if I gave someone my Instagram six-digit code?
Treat it as urgent account access. Stop messaging the person, change your password if you can still log in, review account recovery details and active sessions, and use Instagram account recovery if you are locked out.
Can Instagram get my money back after a scam?
Instagram may be able to act on an account, seller, message, ad, or eligible in-app order issue. Money sent through a bank, card, payment app, wire, gift card, or crypto transfer usually has to be handled with that provider. Ask quickly, but do not assume recovery is guaranteed.
Should I pay someone who says they can recover my Instagram account?
No. Account recovery and un-ban offers in DMs, comments, Telegram, WhatsApp, or forums are often follow-up scams. Use Instagram's official recovery process and avoid anyone asking for payment, passwords, codes, ID images, or remote access.
What if my Instagram account is messaging followers with scams?
Use Instagram recovery if you lost access. If you can still log in, change the password, secure the connected email, remove unknown sessions, review linked accounts, and warn followers through another channel not to click links, send money, or share codes from recent messages.
Where should I report an Instagram scam in the U.S.?
Report the account, message, seller, post, comment, ad, or impersonation inside Instagram. If money moved, contact the payment provider or bank. For broader consumer fraud, use FTC ReportFraud. For internet-enabled fraud, larger losses, crypto, account takeover, or organized online fraud, use FBI IC3.
Sources checked
Platform, government, and consumer-safety sources were checked for reporting routes, account recovery, payment escalation, identity exposure, image-threat resources, and current social-media scam context.
- Instagram scam guidance
Instagram-specific scam warnings, suspicious link guidance, reporting scams, and purchase-protection limits for onsite checkout versus person-to-person or offsite transactions.
- Instagram recent emails guidance
Checking official Instagram emails from account settings and using recent-email history to help identify phishing or spam.
- Instagram hacked-account help
Hacked-account recovery, account security checks, and what to do when login details or access have changed.
- Instagram email-change help
Instagram's email-change notification and reversal guidance for account recovery.
- Instagram message reporting
Reporting messages, chats, abusive photos, videos, and DMs through Instagram reporting tools.
- Instagram impersonation reporting
Reporting accounts that impersonate you, someone you represent, or someone you know.
- Instagram seller and product reporting
Reporting misleading content, possible scams, seller problems, and order-help routes for Instagram shopping situations.
- FTC social media scam data
2026 social-media scam context, 2025 reported losses, shopping scam reports, investment losses, and romance-scam social media origins.
- FTC steps after a scam
Payment-method escalation, personal-information exposure, password exposure, phone/account access, and FTC reporting.
- FTC ReportFraud
U.S. consumer fraud reporting route for scam reports.
- FTC romance scam guidance
Romance scams beginning on Instagram or Facebook, money requests, payment methods, and reporting to FTC and the platform.
- FTC cryptocurrency scam guidance
Crypto payment limits, social media investment pitches, fake platforms, guaranteed returns, and dating-to-crypto warnings.
- CISA phishing guidance
Direct-message phishing context, suspicious link handling, reporting, and account-security practices.
- IdentityTheft.gov exposed information help
Steps when passwords, personal information, financial information, or identity details may be exposed.
- FBI IC3
Reporting internet-enabled fraud, account takeover, investment fraud, crypto fraud, and larger online scam losses.
- Meta 2026 anti-scam update
Current Meta enforcement context for scam ads, brand impersonation, deceptive links, and scam-center accounts on Facebook and Instagram.
- Meta sextortion safety resources
Instagram sextortion safety context, teen protections, NCMEC Take It Down, and getting help when intimate images are threatened.
- NCMEC Take It Down
Official resource for people with nude, partially nude, or sexually explicit images or videos taken when they were under 18 that may have been or may be shared online.
- BBB brand ambassador scam alert
Instagram brand ambassador, sponsorship, discount, upfront purchase, and shipping-fee scam patterns.
- BBB fake customer support alert
Fake social media support accounts, public complaint targeting, and impersonated customer-service accounts.