Instagram scams: fake DMs, phishing links and hacked-account messages

Quick answer

Instagram scams include fake DMs, ads for products that never arrive, investment 'coaches', romance and fake account warnings. Instagram says it never sends DMs about your account. Don't reply or click: report the message in the app and secure your account.

All scam alerts
Comes by
Social media, Email, Ad, Text
Last updated

How it works

Scammers use Instagram because a DM or an ad can reach almost anyone. The FTC's April 2026 data spotlight says nearly 30% of people who reported losing money to a scam in 2025 said it started on social media. Facebook led, with WhatsApp and Instagram a distant second and third.

The versions you're most likely to see:

  • Shopping scams. An ad for something cheap, then nothing arrives. The FTC says shopping scams were the most reported on social media, and more than 40% of people who lost money to a social media scam said it started with an order from an ad.
  • Investment and trading 'coaches'. A DM or ad promises training or big returns. The FTC says investment scams caused the largest social media losses in 2025, about $1.1 billion.
  • Romance scams. Someone builds a relationship over DMs and then asks for money or steers you to an investment. The FTC says nearly 60% of people who reported losing money to a romance scam in 2025 said it began on social media.
  • Phishing and fake account warnings. A message or email claims you broke a rule or your account is at risk and sends you to a fake login page. Instagram says it will never send you direct messages about your account in the app.
  • Impersonation. A fake profile copies you or a friend to ask for money.

Red flags

  • A DM or email warning about your account that asks you to log in through a link
  • A stranger who builds a relationship fast, then brings up money or investing
  • Promises of guaranteed returns or 'coaching' from someone who messaged you first
  • A friend's account suddenly asking for money or a code
  • An ad for a product at a price that seems too good, from a shop with no history
  • Pressure to move the chat to another app or pay by gift card or crypto

Example message

Scam example Don't reply, call back or tap anything in a message like this.
Unknown account
Your account has been flagged for a copyright violation and will be disabled within 24 hours. To appeal, verify your login at [link].

What to do

  1. 1

    Don't reply or click

    Instagram's advice is not to respond to a suspicious message. Don't open links or attachments.

  2. 2

    Report it in the app

    Report the message or profile to Instagram. For a fake profile pretending to be you or someone you know, tap Options, then Report, then Report Account, then 'It's pretending to be someone else'.

  3. 3

    If you entered your password on a fake page

    Reset your password, log out of devices you don't recognize and turn on two-factor authentication. If you can't log in, use Instagram's account recovery options.

  4. 4

    Report suspicious emails

    Instagram says you can send suspicious emails that claim to be from it to phish@instagram.com.

  5. 5

    If you paid

    Call your bank or card issuer and say it was fraud, then report it to the FTC.

Report it

Serus

Check if your details are exposed with Serus

Scammers find your number and address on data brokers and people-search sites. Serus removes them.

Run a free scan

Why you got it

A scammer on Instagram can find you from a public profile, but they get a lot more convincing when they know your real name, phone number or where you live. That information comes from people-search sites and breaches.

Serus finds where your phone number and address are listed on people-search sites and other data brokers and removes them. It also alerts you when your details show up in a breach. That won't stop every message, but it leaves scammers with less to work from. If you clicked or shared anything, our guide on what to do after a data breach covers the next steps.

Common Instagram scams

Frequently asked

Will Instagram message me about my account?

Instagram says it will never send you direct messages about your account in the Instagram app. Treat those as phishing.

Someone is pretending to be me on Instagram. What can I do?

Report the profile in the app as pretending to be someone else. Instagram's help pages say it can act on reports from the person being impersonated or their authorized representative.

I clicked a link in an Instagram DM. What now?

If you entered your password, reset it, log out of other devices and turn on two-factor authentication. If you entered card details, call your card issuer.

Is Instagram a scam?

No, but scammers use it. The FTC says Facebook was the leading platform for social media scam losses in 2025, with WhatsApp and Instagram second and third.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Related scams

All scam alerts

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.