untrappable.Check

Instagram scams: is that DM real?

Editorially reviewed · Last updated September 8, 2026

Yes — this is a scam. Instagram never sends you direct messages about your account — the DM itself is the tell.

Exhibit · Text message

Text Message · Today 11:24 AM
from @instagram[.]security[.]help
Instagram Security: We detected a copyright violation on your account. Your account will be permanently deleted in 24 hours unless you verify ownership here: ig-verify-appeal[.]com/restore
Illustrative text message · not an original screenshot

Other versions you might get: The same account-panic DM arrives as a copyright strike, a “your account will be deleted” notice, a blue-tick verification offer, or a password-reset code someone asks you to read back. Then there's the other half of the category: a friend's hacked account asking you to vote in a contest, a stranger who moves fast to romance, a “guaranteed” crypto or stock tip, and shop ads for high-priced items at impossible prices. Different bait, one shape — someone you didn't contact wants something now.

What to do right now

  1. Don't reply, don't tap, don't send anything. Instagram's guidance for a suspected scam is one line: don't respond, report it.
  2. Check through the app independently. Review account status and the official recent-email list. That list covers a limited period, not every historical communication; ask official support if the claim is unclear.
  3. Report the account. Use Instagram's in-app reporting or the report form, then file at reportfraud.ftc.gov.
  4. If you entered your password: change it immediately from the app, turn on two-factor authentication, and check for logged-in devices and email addresses you don't recognize. Change it anywhere you reused it too.
  5. If you sent money: contact your bank or payment provider promptly. Report suspected fraud and avoid unsolicited paid recovery offers; a new contact is not proof of the same operator.

Reduce the risk of another scam

Scammers work social profiles because your profile does the research for them. The FTC's advice is to limit who can see your posts and contacts, so there's less to build a story out of — and never let someone you met on social media direct your investment decisions. For the wider habit, see how to lock down your accounts.

● Public service · free steps first

Take the free protection steps first

A suspicious message does not tell us how someone found your details. If you shared personal information, start with the official recovery guidance. You can also freeze your credit for free.

Decide what protection you need

Start with the free controls above. Compare what a paid service would add only after deciding which problem remains.

Compare free and paid protection →

No purchase needed. How we use evidence.

Frequently asked

Does Instagram ever DM you about your account?
Instagram says it does not send account-warning DMs inside the app. Check account status and recent official emails through settings independently. The recent-email list covers a limited period, so an older message’s absence alone does not prove it was never sent.
An account says it's Instagram security and wants my login to fix my account — is that real?
It's a scam, and Instagram names this behavior directly in its list of warning signs: people claiming to be from Instagram security asking you to provide account information like your username or password, or offering you account verification services. Nobody at Instagram needs your password — they can already see your account. Treat “I can restore it for you,” “I can get you verified,” and “send me the code” as the same request: hand over your account. Don't send it, and report the profile.
My friend DM'd me asking for a vote or a code — is it really them?
A familiar profile can be compromised, but a request to vote alone does not prove that. Confirm with your friend through a separate known channel and do not share sign-in codes or enter credentials through an unverified link. A code’s purpose depends on the service that sent it.
Why do they always want to move the conversation off Instagram?
Moving away from Instagram can make it harder for Instagram to review the whole exchange, but other apps also have reporting tools and message histories. Moving apps alone does not prove fraud. Verify the person and any money request independently.
How much do people actually lose to scams on social media?
FTC reports recorded $2.1 billion in losses from scams that began on social media in 2025. Shopping was the most commonly reported category, while investment scams accounted for more than half the reported dollars. Nearly 60% of people reporting a romance-scam loss that year said it began on social media. These are reported losses, not a count of all incidents.

Related scams

TextScam

Romance scams: how they work and how to get out

Met someone online who professes love fast, then needs money for an emergency or an investment? Here's how romance scams work and exactly what to do.

TextScam

Facebook Marketplace scams: spot the 3 common tricks

Buying or selling on Facebook Marketplace and something feels off — a “verification code,” an overpayment, or a move to Zelle? Here's the verdict and what to do.

TextScam

Crypto scams: guaranteed returns are the giveaway

An “investment manager,” a can't-lose trading platform, a fee to withdraw your profits? Here's the verdict and what to do.

EmailScam

Sextortion scam: don't pay — here's what to do

An email claims they recorded you and shows an old password, or someone you met online is threatening to share your photos? Here's the verdict and exactly what to do.

TextScam

Cash App text scam: is that payment alert fake?

Got a text about a Cash App payment, refund, or login you didn't make? Here's the verdict — and how to check safely in under a minute.

TextScam

Social media scams: spot fake offers and profiles

A social post, ad, or new contact promises a bargain, romance, or foolproof investment? Here's the scam pattern and what to do.

Sources

  1. 01Avoid getting scammed on Instagram— Instagram Help Center
  2. 02How to spot the top scams that started on social media— Federal Trade Commission
  3. 03Report fraud to the FTC— Federal Trade Commission
  4. 04Official security and fraud guidance— ftc.gov

Pass it on

Help protect someone else

If this could have fooled you, it can fool someone you know — a parent, a friend, the family group chat. It's safe to forward, and stands on its own as a record for a bank or the police.