Security alerts · Social Media

"Verify your account" links on Instagram and Facebook

You get a message saying your account will be closed, or that you'll get a "blue tick" if you click a link. The link steals your password and takes over your account.

Scammers send DMs or emails that look like they come from Meta, Instagram or Facebook: "Your account violated copyright and will be disabled within 24 hours" or "You have been selected for a verification badge".

The link takes you to a page that looks exactly like Instagram or Facebook. If you enter your username, password or SMS code, the scammers log in to your account, change the password and start scamming your friends in your name.

Warning signs

• The message threatens that your account will be closed very soon
• The link does not end with the real instagram.com or facebook.com (e.g. instagram-support-help.com)
• You are asked for an SMS or "2FA" code you received
• The message comes from an unverified or newly created account

How to protect yourself

• Turn on Two-Factor Authentication (2FA) using an app like Google Authenticator
• Instagram and Facebook don't send messages like this through DMs
• Never give anyone a code you received by SMS, even if they say they work for Meta
• Check official messages under Settings > Security > Emails from Instagram

If you are affected

• Change your password immediately if you can still log in, and log out of all devices
• If you are locked out, use instagram.com/hacked or facebook.com/hacked
• Tell your friends through another channel not to send money in your name
• Contact us and we'll help you recover and secure your account