Fake Instagram Copyright and Verification Scams: Don't Panic-Click

Your phone buzzes with a direct message: "Your account will be permanently disabled in 24 hours for copyright infringement." Or maybe it says you have been "selected for a verified badge." Both messages push you toward a link, and both are well-known tricks for stealing social media accounts.

How the scam works

The scammer wants your username and password, and often your two-factor code too. They send a message that looks official, sometimes with logos, a "case number" and a countdown. The link leads to a fake login page that copies the real one. When you type in your details, the scammer receives them instantly.

Once they are in, they can lock you out, message your followers with the same scam, sell the account or use it to pressure your friends for money.

Two popular disguises

• The copyright warning: It claims you used someone's music, photo or video and must "appeal" immediately through a link. The goal is to make you panic so you stop thinking.
• The verification offer: It promises a blue badge, a "creator program" spot or a special partnership. Real platforms do not hand out status through random DMs that ask for your password.

Other variations include a "brand ambassador" offer, a fake "suspicious login" alert or a message from a friend's hacked account sending you the same link.

Warning signs to look for

1. Urgency: Deadlines like "24 hours" or "final warning" are designed to rush you.
2. Threats or big rewards: Fear of losing your account and excitement about getting a badge both work on emotions.
3. An odd sender: The account may have a name like "Support Team" with few posts, a strange username or a recently created profile.
4. A strange link: Look for misspellings, extra words or unfamiliar endings in the web address. Shortened links hide where you are going.
5. A request for your password or a code: A genuine service will not ask you to send a login code in a chat.
6. Poor wording: Odd grammar and generic greetings are clues, though some scams are polished, so do not rely on this alone.

What to do when you get one

• Stop and do not click. Take a breath. Nothing legitimate needs a decision in the next five minutes.
• Check inside the app. Open Instagram yourself, not through the message, and look in the account settings for any official notices about your account.
• Report and block. Use the in-app report option on the message or profile, then block the sender.
• Tell someone. Show a parent, guardian, teacher or older sibling. Scammers rely on you keeping quiet.
• Warn your friends if the message came from someone you know, because their account may be hacked.

If you already entered your details

1. Change your password right away on the real app or website. Make it long and unique.
2. Change the password of any other account that used the same one, starting with your email.
3. Turn on two-factor authentication, preferably with an authenticator app instead of text messages.
4. Check your login activity in settings and log out of any devices you do not recognise.
5. Review the email address and phone number linked to the account in case the scammer changed them.
6. If you are locked out, use the official account recovery process in the app. Do not trust anyone who offers to "get it back" for a fee.

Habits that protect you every day

• Use a different password for every account, ideally stored in a password manager.
• Treat every unexpected DM with a link as suspicious, even from a friend. Ask them on another channel whether they really sent it.
• Keep your email account especially secure, because it can reset all your other accounts.
• Never share verification codes, even with someone who says they are from support.

Learn more from trusted sources

For videos, look on YouTube for official channels from organisations such as the UK National Cyber Security Centre (NCSC), the US Federal Trade Commission (FTC) and Google's security team. Choose short videos about phishing and account protection. We are not linking specific videos here because they change often, so check the channel is verified and the video is recent.

For reports and PDF guides, the NCSC website (ncsc.gov.uk) and the FTC consumer site (consumer.ftc.gov) both publish free, plain-language advice on phishing and account security. Search their sites for "phishing" or "social media accounts" to find downloadable guides. Instagram's own Help Centre also explains how to secure and recover an account.

The bottom line

Scammers use fear and flattery because they work. A copyright threat or a badge offer might feel urgent or exciting, but the safest move is always the same: pause, skip the link, check in the real app and tell someone you trust. A few seconds of doubt can save an account you have spent years building.