Greg's Corner

New Instagram scam hijacks your account

By Greg Collier

We wouldn’t say Instagram is rife with scammers, but it’s definitely fertile ground for them. Most often, Instagram scams involve accounts that claim to be selling a product you’ll never receive. There are also accounts that attempt to lure victims in with some get-rich-quick scheme, typically involving cryptocurrency. Even on Geebo.com’s Instagram account, we receive comments from spam accounts asking to promote our posts on these spam accounts. However, today, we’re going to discuss a scam that not only compromises your Instagram account, but could take it over too.

Essentially, it’s a phishing scam. Phishing is a type of hack where an attacker sends a fraudulent message designed to trick a person into revealing personal information. In this case, scammers are sending out emails that appear to have come directly from Instagram. The email states that the Instagram account in question has violated copyright law and will be deleted in 24 hours if the user doesn’t act. The email also contains a link for users to click if they want to dispute the claim.

Of course, anybody who is active on Instagram is going to click the link to attempt to protect their account. Once the link is clicked, the user will be asked to input their Instagram login information for verification. Then, the user will be directed to Instagram.com, making the scam seem almost legitimate. Scammers do this to obtain accounts, so they can have more accounts to help spread other scams. It doesn’t matter whether you have 2 million followers or just two. Scammers will attempt to hijack any active account they can to lend legitimacy to their other scams.

To protect yourself from a scam like this, you should know how Instagram actually handles copyright claims. They do not delete entire accounts for a single infraction. Instead, if an author of a work claims you violated their copyright, Instagram will remove the post from your account and send you a message saying so. Another way to protect yourself is by inspecting the email itself. While it may look as if it came from Instagram, scammers are hoping you won’t look at the email address it came from. Often, phishing emails are sent from free email services like Gmail and Yahoo. You can also check any links sent in the email by hovering your cursor over the link. This should show you where the link will actually take you.