High riskSocial Media In-depth guide 8 min read

Instagram Verification Scam

This scam offers a blue verification badge or warns your account is at risk, then links to a fake login page that steals your password.

Quick verdict

Risk level
High risk
Scam type
Account phishing scam
Main red flag
A DM or email offering verification or warning of account loss through an outside link.
What to do first
Do not log in through the link. Manage verification only inside the official app.

How this scam works

A message or email says your Instagram account qualifies for the blue verified badge, or, in the darker version, that your account has violated a policy and will be deleted unless you "verify" immediately. Either way you are steered to a link that looks like Instagram and asked to log in or confirm details. This is a targeted phishing scam aimed at one of the most valuable things you own online: control of your account.

Verification and "copyright/community-guideline" warnings are effective bait because they mix aspiration and fear. The link leads to a convincing fake login page; the moment you enter your username, password, and any two-factor code, the attacker takes over. From there they can lock you out, message your followers to spread the scam, or demand a ransom to return the account, especially painful for creators and businesses.

The safest habit is to ignore links in these messages entirely. Real account status, verification eligibility, and policy notices appear inside the official app, under your account settings, never as a one-off link asking you to log in from an email or DM.

Related tricks worth knowing: the Facebook Account Recovery Scam and the Fake Giveaway Scam. For the wider picture, browse the Social Media Scams guides or run the message through our scam checker.

By the numbers

$1.4B
reported lost to fraud that began on social media in the US in 2023
Source: US Federal Trade Commission
Top channel
social media was among the most common ways scams reached people in 2023
Source: US Federal Trade Commission

Tell-tale red flags

  • A message promising a verification badge through an outside link
  • A warning that your account will be deleted unless you 'verify' now
  • A login page on a web address that is not the official platform
  • A request for your password, email, or two-factor code
  • Urgent deadlines designed to make you act fast

Staying safe

  • Ignore the link and open the app directly
  • Manage verification only through official in-app settings
  • Turn on two-factor authentication
  • Report the message as spam or phishing

How to verify safely

  • Never log in through a link in a DM or email; open the official app and check settings yourself.
  • Turn on two-factor authentication, and never share a login code with anyone, including "friends."
  • Check verification eligibility and any policy notices only inside the official app's account settings.
  • Be sceptical of urgent deadlines and threats of deletion, these exist to rush you.
  • Use a unique password for your social accounts so one breach cannot unlock the rest.

How it usually reads

Example pattern, not a real report
Example pattern: 'Your account is eligible for the verified badge. Complete verification within 24 hours or your eligibility expires: [suspicious link]'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

What to notice: A DM or email offering verification or warning of account loss through an outside link.

Step by step: how the scam unfolds

  1. The hookYou are told you qualify for verification, or that your account broke a rule and faces deletion, to trigger action.
  2. A link to a fake pageThe message links to a lookalike Instagram or "Meta" login or "appeal" form on a non-official web address.
  3. Credentials capturedYou enter your username and password, and often a two-factor code, all sent straight to the attacker.
  4. Account takeoverThey change your login details and recovery options, locking you out of your own account.
  5. Spread or ransomThey message your followers to run the same scam, or demand payment to return your account.

A real-world scenario

Anonymised, illustrative scenario

An illustrative example

Layla, who runs a small craft business on Instagram, received a DM saying her account had been flagged for a copyright violation and would be removed within 24 hours unless she completed an "appeal." The link opened a page that looked exactly like an official form and asked her to log in.

Something felt off: real notices appear in the app, not as a DM link with a countdown. She did not log in through the link. Instead she checked her account's official Help and Security settings, which showed no violation. The DM was phishing. By pausing, she kept control of the business account she depends on. This is a fictional illustration of a common tactic.

Variations to watch for

Copyright / community-guideline strike

A fake violation notice with a deadline pressures you to "appeal" via a phishing link.

Paid verification offer

A "service" promises to get you verified for a fee, taking your money and often your login too.

Compromised-friend message

A hacked friend's account asks you to "vote" for them or receive a code, hijacking your account next.

Brand-collaboration bait

A fake sponsorship offer leads to a malicious link or a request for login "to check your insights."

Steps if you already acted

  • Change your password immediately from the official app
  • Log out other sessions and review login activity
  • Turn on two-factor authentication if it is not already on
  • Warn contacts if your account may have sent messages

Common mistakes

  • Do not enter your password on a linked page
  • Do not share two-factor codes with anyone
  • Do not authorise unknown apps to access your account

Scams like this one

High risk Social Media

Facebook Account Recovery Scam

This scam uses a hacked friend's account to ask you to be a 'recovery contact' or share a code, which actually hands your own account to the scammer.

Created by Scam or Safe Editorial Team
Medium risk Social Media

Fake Giveaway Scam

This scam tells you that you won a prize or giveaway, then asks for a fee, your login, or personal details to 'claim' it.

Created by Scam or Safe Editorial Team
High risk Social Media

Romance Scam DM

This scam builds an online romantic relationship through messages, then invents an emergency or investment to ask for money, while always avoiding meeting in person.

Created by Scam or Safe Editorial Team

Your questions answered

Does Instagram offer verification by DM?
Verification is handled inside the official app, not through unsolicited DMs with outside links. Such messages are almost always phishing.
Why is there a countdown or deadline?
Urgency is a manipulation tactic. It pressures you to act before you have time to question whether the offer is real.
I entered my password. What now?
Change it immediately, turn on two-factor authentication, and review your active sessions and login activity from the official app.
How can I protect my account?
Use a strong unique password, enable two-factor authentication, and never log in through links sent in DMs or emails.

Sources & further reading

The figures and guidance above draw on publicly available data and advice from fraud-prevention authorities. Always confirm current reporting details through official government sites.

Last reviewed June 2026 · Written & reviewed by the

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.