Instagram has over 2 billion monthly active users, and its direct messaging feature has become a primary channel for scammers. From fake brand collaborations to crypto investment pitches, Instagram DM scams cost users an estimated $870 million in 2025. Here is what to watch for and how to protect your account.
The Most Common Instagram Scam Messages
1. Fake Brand Collaboration Offers
"Hi! I'm the marketing manager at [brand]. We love your content and would like to offer you a paid collaboration. Please fill out the application at brand-collab-apply.com to get started!"
These messages target anyone with a public account, not just influencers. The link leads to a phishing page that asks for your Instagram login credentials or personal information. Real brand deals come through verified business accounts, reference your specific content, and never ask you to enter your Instagram password on a third-party site.
2. "Is This You in This Video?"
"OMG is this you?? 😂" [link]
This message often comes from a friend whose account has been hacked. Clicking the link takes you to a fake Instagram login page. You enter your credentials thinking you need to log in to see the video, and now the scammer has your account. They then send the same message to all your followers.
3. Fake Copyright Violation Notices
"Your account will be permanently deleted in 24 hours due to copyright infringement. Appeal here: instagram-copyright-appeal.com"
Instagram does not notify you of copyright violations via DM. Official copyright notices appear in your account's Support Requests section (Settings → Help → Support Requests). The fake appeal link captures your login credentials.
4. Investment and Crypto Pitches
"I just made $5,000 in 24 hours with this crypto platform. You should try it! My mentor helped me get started. Want me to introduce you?"
These come from hacked accounts or fake profiles. The "mentor" is a scammer running a pig butchering scheme or promoting a fake trading platform. Any unsolicited investment pitch on Instagram is a scam.
5. Fake Verification Services
"Get your blue checkmark! We work with Instagram's partner program. DM us for details."
Instagram's verification is managed through Meta Verified, which you apply for within the app. Nobody can sell you a blue checkmark. These scams ask for your login credentials or payment for a service they cannot deliver.
6. Romance Scams
A new follower with an attractive profile picture starts engaging with your posts, then moves to DMs. Over time, they build a relationship and eventually ask for money — usually citing an emergency, travel costs to meet you, or a business opportunity. Profile photos are typically stolen from other accounts.
7. Fake Giveaways
"Congratulations! You have been selected as a winner of our $1,000 gift card giveaway. Claim your prize at [link]"
Real giveaways are announced publicly on the brand's verified page, not via random DMs. Claiming the "prize" involves entering personal information or paying a "processing fee."
Think it might be a scam?
Paste it here for a free, instant verdict.
Free · No signup required · Cmd+Enter to scan
How to Verify Suspicious Instagram Messages
- Check the sender's profile. How old is the account? How many posts do they have? A brand with 10 followers and 0 posts is not legitimate.
- Look for the verification badge. Major brands and legitimate influencer agencies have blue checkmarks.
- Never enter your Instagram password outside the official app or instagram.com.
- Copy the link text (without clicking) and paste it into IsThisAScam.to to check it against known phishing databases.
- Search for the offer. If a brand is running a real collaboration program, it will be mentioned on their official website.
Account Takeover: What Happens and How to Recover
When a scammer gains access to your Instagram account, they typically:
- Change your password and email to lock you out
- Send scam DMs to all your followers
- Post fake investment or giveaway content on your feed
- Use your account as a "trusted" profile to scam your friends and family
Recovery Steps
- Check your email. Instagram sends security notifications to your registered email. Look for a message about an unrecognized login and use the "revert this change" link.
- Request a login link. On the Instagram login page, tap "Get help logging in" and request a login link to your email or phone.
- Use video selfie verification. Instagram may ask you to record a video selfie to prove your identity. This matches your face against photos on your account.
- Contact Instagram support. Go to the Instagram Help Center and follow the "hacked accounts" workflow.
- Warn your followers. Once you regain access, post a story alerting followers that your account was compromised and to ignore any messages sent during the breach.
How to Protect Your Instagram Account
- Enable two-factor authentication. Settings → Accounts Center → Password and Security → Two-Factor Authentication. Use an authenticator app, not SMS.
- Check login activity regularly. Settings → Accounts Center → Password and Security → Where You're Logged In. Remove sessions you do not recognize.
- Be cautious with third-party apps. Review and revoke access for apps you no longer use: Settings → Website permissions → Apps and Websites.
- Set your account to private if you do not need a public profile. This limits who can send you DMs.
- Use message controls. Settings → Privacy → Messages. You can restrict message requests from accounts that do not follow you.
- Never click links in DMs from unknown senders. This is the number one prevention measure.
How to Report Scam Messages
Reporting helps Instagram's systems identify and remove scam accounts:
- Open the scam message or profile
- Tap the three dots (⋯) in the top right
- Select "Report"
- Choose the appropriate category (scam, spam, or impersonation)
- Follow the prompts to complete the report
You can also report phishing emails and messages outside Instagram by forwarding them to phish@instagram.com.
Received something suspicious? Check it now for free →