Active threat
Category hub
Instagram scam alerts
Instagram is a primary vector for influencer-impersonation crypto scams, fake brand-collab phishing of creators, and 'sliding into DMs' romance/pig-butchering opens. Meta's own data shows fraud reports on Instagram nearly doubled YoY in 2024.
Last updated · sorted newest first
Go deeper on this topic
Weekly digests move fast — jump into the evergreen hubs and guides for the full playbook, red flags, and reporting steps.
What this is
Instagram scams cover any fraud whose initial vector is Instagram — DM-based romance scams, fake giveaways requiring a 'fee', impersonation of brands or celebrities for crypto giveaways, fake-collab phishing targeting creators' OAuth/credentials, and copyright-strike spoofing.
Red flags to watch for
- DM from a verified-looking celebrity offering crypto giveaway — real celebrities don't DM strangers about money
- 'Brand collab' offer requiring you to click a link to claim — usually leads to OAuth phishing that hijacks your account
- 'Copyright violation' DM threatening account deletion unless you 'appeal' via a link — Meta never DMs copyright notices
- Account asks you to share a verification code from SMS — account-takeover attempt
- Romance match within hours pivots to a crypto-investment platform recommendation
Live cases from the GACS feed
Loading current cases…
What to do if you've been targeted
- 1
Block and report the account
Use Instagram's Report -> Scam or fraud flow. Repeat reports from multiple users accelerate takedown.
- 2
Lock your own account
Enable 2FA via authenticator app or hardware key. Review active sessions and revoke unknown devices.
- 3
Revoke OAuth and third-party apps
Settings -> Apps and websites -> revoke anything you don't recognise.
- 4
Report to platform fraud team
Use help.instagram.com to escalate fraud and impersonation. For UK: Action Fraud. US: reportfraud.ftc.gov.
- 5
Activate Shield
Save the actor's handle and any wallets to your free GACS Shield.
FAQs
My Instagram was hacked — how do I recover it?
Try Instagram's recovery flow at instagram.com/hacked. Use the email address originally registered. If 2FA was changed by the attacker, request a video-selfie verification. Once recovered, enable hardware-key or authenticator 2FA.
How do I report an Instagram scammer?
Profile -> ... -> Report -> Scam or fraud. Also report the specific DM. For impersonation of you or someone you know, use the dedicated impersonation form at help.instagram.com.
Are paid blue-check accounts on Instagram safer to trust?
No. Meta Verified ($14.99/month US) confirms you submitted government ID but does not vet what you post or that you are the brand depicted. Scammers buy verification and impersonate brands with subtly different handles (Cyrillic 'o' for Latin 'o'). Trust derives from the linked website and prior content history, not the badge.
What is the 'fake brand collab' creator-account hijack?
Scammers pose as a brand's PR team and send creators a contract-doc link. The link is an OAuth-phishing page requesting Instagram permissions. Granting it gives the attacker permanent posting and DM access via the Instagram Graph API — without ever needing your password. Audit Settings → Apps and websites monthly and revoke anything unfamiliar.
How do I report a scam to GACS?
Submit the wallet address, website, phone number, or social handle at gacs.app. Each report is cross-checked against CryptoScamDB, URLhaus, and on-chain analysis before publication. Activate your free GACS Shield to monitor follow-on activity tied to the same actor.
Is the GACS Shield really free?
Yes. Activating your free Shield gives you unlimited scans, saved history, weekly alerts, and a watchlist — no card, no trial. There is no paid scanner tier.
Related scam profiles & guides
Activate your free GACS Shield
Save scammer handles, wallets, and domains. Get alerted when the same actor surfaces in a new report. Unlimited scans, no card.
Get My Free Scam AlertsAuthoritative sources
Independent primary sources used to check and corroborate the guidance on this page.
- FBI Internet Crime Complaint Center (IC3)
Official US channel for reporting internet-enabled fraud and cybercrime.
- US Federal Trade Commission — ReportFraud
Consumer fraud reporting and published enforcement data.
- UK Action Fraud
UK national reporting centre for fraud and cybercrime.
- Canadian Anti-Fraud Centre
Canada's central repository for fraud reports and scam alerts.
