How instagram account get hacked


How Do Instagram Accounts Get Hacked? Plus, How to Prevent It

Your chances of getting hacked on Instagram increased tenfold in the last year. Here's how to protect your account before it happens to you.

Buckle up, social media users, because hackers are having a field day on Instagram. About 13% of Americans have been hacked on Instagram, according to NordVPN. And while hijacking on all social media platforms rose tenfold in the last year, Instagram users have taken the brunt of it. In a new Identity Theft Resource Center (ITRC) survey, 85% of the social media hacks reported to the group involved Instagram accounts. So, how do Instagram accounts get hacked?

This information is essential if you want to avoid losing all your vacay pics, first-day-of-school poses and cute pet posts. Yep, that’s right—those posts might disappear forever. Only 30% of users are able to recover their account after Instagram hacking. And that may be the least of your problems. Of all the online scams, “this type of identity crime has a profound financial and emotional impact on victims,” says James E. Lee, ITRC’s chief operating officer. More than 80% of ITRC’s survey respondents said they felt anxious and violated after they were hacked. Plus, cybercriminals could walk away with your money and the ability to create fake Instagram accounts in your name.

Here’s what you need to know about this type of hack and how to level up your Instagram account’s security with just a few simple steps. When you’re up to speed, find out how to recover a hacked Facebook account, just in case you’re hit with a hack there as well.

Get Reader’s Digest’s Read Up newsletter for more tech, humor, cleaning, travel and fun facts all week long.

How do Instagram accounts get hacked?

Hackers have all kind of tricks up their sleeves, and the bottom line is, you need to be smarter than they are. Luckily, a little knowledge will go a long way.

RD.com

Phishing and other forms of social engineering

About half of hackers gain access through phishing links, when users click on a link in their direct messages on Instagram, according to Lee. “The links are usually in direct messages that appear to be from one of the victims’ Instagram followers,” he says. “But the follower’s Instagram has been compromised.” For example, you might receive a DM from a work buddy asking you to take a survey. You instinctively click on the link, and when you do, malware infects your device and gives the hacker access to your account.

In another common hack, you’ll receive “suspicious activity alerts” that appear to be from Instagram … but aren’t. These alerts contain links that will compromise your account. Variations on this theme include someone claiming that you infringed on their copyright or even offering you a verified badge.

Security breaches on other sites

Security breaches on e-commerce sites are the gifts that keep on giving to criminals—and they’re more common than you think. Let’s say you bought a cute top from a small business’s website, and that site is compromised. The hacker may now be within striking distance of your Instagram account. “Hackers will try those passwords on your other accounts and see if there’s a match,” says Samuel Mulder, PhD, an associate research professor at Auburn Cyber Research Center in Alabama. If your Insta password matches the one you used for this business, the hacker can easily get into your account. That’s why good passwords—and different passwords—are so important.

RD.com

Public Wi-Fi

Whenever you connect to public Wi-Fi, your data is in danger. In an effort to lure you in, hackers sometimes create an open hotspot with a name that sounds similar to a common hotspot—for example, an airport or restaurant nearby. Then, when you try to connect, they steal your data and inject malware into connected devices.

Third-party apps

Finally, you may unwittingly hand over your username and password to a hacker through a third-party app. This might happen when you download an app to schedule your posts or see who unfollowed you on Instagram. Some of these apps ask you to enter your password. Don’t do it! Download the wrong app and your account will be compromised. Wondering if you can see who views your Instagram profile? We have the answer.

What hackers can do with a hacked account

While an attack on your Instagram account feels very personal, it’s just business for hackers. Here’s the type of havoc they can wreak once they have access to your account.

Scam your followers

Cryptocurrency is the big scam at the moment—after all, who wouldn’t want to make some easy cash fast? Hackers will post as you on your account and encourage your followers to invest in bitcoin and other types of cryptocurrency. Of course, there’s no actual investment, only a scam that swindles money from unsuspecting friends and family members. “One victim told us that hackers took almost $10,000 from their followers,” says Lee.

Steal sales revenue

Hackers often target social media accounts with large followings. These influencers typically recommend products and get a percentage of the sales when someone purchases the product through their link. When an account gets taken over, that money funnels to the hacker instead of the influencer. In the ITRC report, 51% of victims reported losing sales revenue in this way.

Demand ransom

In some instances, Lee says, the hacker will contact the account owner and demand a ransom to turn over the account. “Don’t pay the ransom,” Lee warns, “because you won’t get your account back and you’ll be out even more money.”

Make illegal requests

Hackers can use your account to set up drug deals or ask other Instagram users for pornographic photos. This isn’t only embarrassing—it can also get you in hot water with the authorities.

Sell your account on the black market

Hackers can sell an entire account on the “dark web,” a hidden part of the internet that’s available only on special web browsers. There, cybercriminals buy and sell Instagram accounts for the purpose of spreading propaganda or trying to scam your followers. According to PrivacyAffairs.com, a typical Instagram account fetches around $45, so it’s affordable to them but potentially devastating to you.

How to protect your Instagram account

Now that you know the answer to “How do Instagram accounts get hacked?” you probably want to do everything you can to avoid all this drama. Here are some simple steps to take.

RD.com

  • Activate two-factor authentication. This is a secret that hackers don’t want you to know: If you set up this safety measure, Instagram will give you a heads-up when someone logs into your account from a device that they don’t recognize as yours. You’ll receive a notification or be asked to enter a special login code. Since the hacker won’t have that code, you’ll stop most attacks in their tracks. Can Instagram be hacked if you have these safeguards in place? Unfortunately, some hackers may have sneaky workarounds, but it does provide a solid barrier. To set up 2FA, tap on your profile picture, tap settings and then tap security. Tap two-factor authentication, and follow the prompts. It takes just five minutes.
  • Be skeptical. When a friend DMs you a link, you probably think nothing of it. But pause before you click: If it raises even a smidge of suspicion, it’s better to text your friend and ask, “Did you just DM me something?” The same goes if someone is requesting your phone number through an Insta DM. One way hackers have gotten around two-factor authentication is by posing as a friend and asking the victim for their mobile number.
  • Become more password savvy. When hackers get passwords through a cyberattack on a store, for instance, they try using them on all sorts of accounts. If it matches your Instagram password, bingo—they’re in! At the very least, create strong “passphrases” (comprised of multiple words) for each site. Better still, consider using password manager software to generate strong passwords for each of your accounts and avoid making these common password mistakes.
  • Vet third-party apps. Do your research online about third-party apps, and steer clear of ones that require you to hand over your password. Instead, look for apps that ask you to sign in on your own and then give access to certain things, such as posts or comments.

What to do if your account gets hacked

Yes, it’s human to want to commiserate and tell all your friends, “My Instagram was hacked!” Of course you’ll do that, but first you need to take a few important steps to protect yourself. No need to Google “what to do if your Instagram is hacked”—we’ve got all the links you need right here.

  • Instagram’s Help Center: Hackers usually change Instagram emails, passwords and phone numbers as soon as they get access to an account. In case the hacker hasn’t done that yet, go to the help center and see if you can change your password. This is also where you’ll find information on setting up two-factor authentication and a recovery code in case your device is stolen.
  • Instagram’s Abuse and Spam section: If you clicked on a link or gave out your information and then immediately realized it was a bad idea, come to this section for help. It will walk you through what to do, as well as allow you to report spam and phishing attempts.
  • Instagram’s Hacked Accounts page: Head here if you’re locked out of your account. You’ll receive an email from Instagram, and you can also request a login link, a security code and support. Unfortunately, Instagram account recovery can be tedious, but our step-by-step instructions will make it a lot easier. That said, you’ll still likely have to go through a lengthy process to verify your identity.

Now that you know how Instagram accounts get hacked, find out about Facebook’s many scams, including Facebook Marketplace scams.

Sources:

  • NordVPN: “Fears Over Social Media Hacking Are Rising: Here’s How to Keep Your Account Safe”
  • ITRC: “ITRC Consumer Impact Report”
  • James E. Lee, chief operating officer of Identity Theft Resource Center
  • Samuel Mulder, PhD, associate research professor at Auburn Cyber Research Center in Alabama
  • Privacy Affairs: “Dark Web Price Index 2021”

Popular Videos

How Your Instagram Account Can Be Hacked and How To Stop It

Instagram is one of the most popular social media apps, so of course, it is a big target for cybercriminals who want to hack into accounts.

So how do people hack your Instagram? What are the consequences of this happening? And what can you do to secure your Instagram account?

Instagram hacking happens in several ways. Many attempts involve social engineering, which manipulates users whose accounts are susceptible to attacks.

These are the most common methods of hacking Instagram profiles.

How Do People Hack Instagram With Malicious Software?

Some hackers infect computers with keylogging software. It records anything someone types, allowing unauthorized parties to capture your Instagram login details that way. Alternatively, malicious software could get on your computer after you click a suspicious link or download a dangerous attachment.

Numerous fraudulent websites use phishing tactics to learn passwords or encourage people to sign up to access accounts.

Determined cybercriminals can target accounts to crack them, but obviously, the software they use is illegal in most countries. In some cases, the software itself is fraudulent too, used to trick people who want to get into someone else's profile into falling victim themselves.

How Do Instagram Accounts Get Hacked Through Third-Party Apps?

Instagram hacks also happen indirectly. Cybercriminals could take over a third-party platform that some people use to access Instagram, compromising all the associated account details in the process.

This is possible through Instagram integrations, as well as linked platforms such as Facebook.

How Do People Get Hacked on Instagram Due to Password Problems?

If you use the same password for another account and it's part of a data leak, cybercriminals could hack into your account using this same password.

Alternatively, if your password is too easy for hackers to guess, your account is at risk.

How Does Instagram Get Hacked Through In-App Scams?

Some hackers trick people into giving up their account details by orchestrating scams. One recent approach making the rounds involves people receiving Instagram messages saying their friends made them gifts. However, the associated link sends people to an external site that steals their passwords.

Cybercriminals also target Instagram and Facebook users with Cash App scams. They promise to send people $850, but experts say falling for this offer could lead to identity theft.

It’s not always skilled hackers breaking into Instagram accounts. How can someone hack your Instagram account if they aren’t a cybersecurity expert? One of the main ways is through purposeful or unintentional device access combined with automatic logins.

Instagram can store information for multiple accounts. However, you can only access them one at a time. Maybe you often let your housemate or a significant other use your phone to access Instagram themselves. If you later have a falling-out, and they know your password, that party could hack your Instagram.

A similar situation could happen if someone steals your phone, you lose it, or an unauthorized person gets access to your email. These outcomes become problematic if you have the two-factor authentication (2FA) feature activated for Instagram.

Having access to your email or phone could provide a hacker with the 2FA verification code they need to log in to your account without knowing the password. They could then access the account and change the password to something only they know.

The reason for the hack and the methodology used determines what happens after an account hack. In cases where the hacker is someone close to you, you may not notice any changes to your account if the person solely did it to spy on you.

In cases where professional cybercriminals have hacked Instagram profiles, there may be significant changes to the account and its accessibility. These users will likely find themselves locked out of the account. If someone else controls it, they can change the passwords to keep you locked out of the account.

How Do People’s Instagram Accounts Get Hacked When They Are Influencers?

Cybercriminals often take a particular interest in hacking the accounts of influencers. When people have tens of thousands of followers or more, malicious parties could have a broader reach by compromising those accounts.

Sometimes, internet criminals use special software that launches a brute-force attack against those accounts. Regardless of how the takeover happens, some Instagram influencers reported on BuzzFeed News that contacting the site itself doesn’t often help. Desperation may make them resort to hiring white-hat hackers to resolve the problem.

In some cases, hackers demand a ransom for the account. In other cases, they may change significant details on the account, such as images. Hackers often sell off accounts with many followers or hijack the accounts of specific well-known people for profit.

Instagram’s security features get progressively more advanced in response to hacked user accounts. These changes make it more difficult for hackers to access accounts and easier for affected users to regain access.

If you believe someone has hacked your account, the first step is to report it to Instagram. They will record all the details, examine the case, and assist in getting the service restored as quickly as possible.

The hacker may have also logged you out of your account and changed the password. Select Get Help Logging In (on an Android device) or Forgotten Password? (on an Apple product). You’ll then need to verify your account by entering one of the identity confirmation details, such as a phone number.

If you do not have any of the requested information, choose Need More Help? and follow the on-screen instructions. This is the first step to contacting Instagram’s support team, but you must enter a security code to go further. It goes to your email address or phone number.

Verifying Your Identity

The methods of confirming your identity vary depending on if the Instagram account in question contains pictures of you. If it does not, Instagram’s support team sends an automated email requesting that you provide the following information.

  • The email address or phone number used when creating the account
  • The type of device used during the account’s creation (such as an Android phone or an iPad)

If the compromised account has photos of you, Instagram uses a video-selfie method for verification. It requires turning your head in different directions while creating the clip. The Instagram team reviews the video within two business days.

Passing this test results in getting an email from Instagram containing a link to reset your password. Conversely, you may receive an email requiring the submission of another selfie video.

Additionally, Instagram's Recently Deleted folder is a helpful feature that restores deleted posts, stories, and reels. Whenever you remove your Instagram content, they first go and stay in the folder for 30 days before being permanently erased.

If you suspect an account hack but can still log in, take the following steps to secure your account:

  • Change your password. Passwords should be unique to Instagram and strong to deter hackers from guessing the correct one.
  • Enable two-factor authentication. This requires an extra code when you’re attempting to log into your account; cybercriminals would need access to that device or service to sign in too.
  • Confirm that your contact details (email address and phone number) linked to your account are correct. If you get an email regarding unknown changes to your Instagram account, verify that it's real by trying to log in on a different window. Otherwise, it could be a phishing scam. Contact Instagram separately, without clicking on any suspicious links.
  • Check which linked accounts and third-party apps have access to your Instagram. You can do this in the Security section of your Instagram account, which shows your log inactivity. Remove access from suspicious accounts and apps. You can see the geographic locations of where you’re logged in and which devices are being used. If there are any that you do not recognize, you can log out of them.

There are steps you can take to prevent hackers from gaining access to your account.

These steps are simple to take and are more than worth your while: a hacked account can wreak havoc on your privacy and security. Nip it in the bud by taking simple precautions.

What to do if your Instagram account could be hacked?

Take action on the website or app to secure your Instagram account if you think it has been hacked or is being used by someone else. If someone has accessed your account or you're unable to sign in, visit this page in a browser on your computer or mobile device to help protect your account.

You can also try to restore access according to the instructions below. Some of the actions listed are not available for all account types, but we recommend trying each one. nine0003

Check if you received an email from Instagram

If you received an email from [email protected] informing you that your email address has changed, please try to cancel and secure your account by clicking on the link. If some other information has changed (for example, the password), and you cannot restore the previous email address, request a login link or Instagram security code.

Request Instagram login link

To help us verify that the account belongs to you, request a login link, which we will send to your email address or phone number.

To request a login link:

Click Get help signing in (Android) or Forgot your password? (iPhone or browser).

Enter the username, email address, or phone number associated with your account and click Next. If you don't have access to that username, email address, or phone number, enter the login information you last used. Then click Can't reset your password? under the Next button and follow the instructions on the screen. nine0003

Pass verification to verify you are human (browser only).

Select your email address or phone number, and then click Next.

Follow the login link provided in the email or SMS and follow the instructions on the screen.

Request a security code or support on Instagram

If you are unable to recover your account using the login link, please request support.

To do this, follow the steps below. nine0003

Instagram app for Android

Instagram app for iPhone

Enter a secure email address that only you can access. After submitting your request, expect an email from Instagram with further instructions.

Learn more about what to do if you don't know your username.

Verify your identity

If you request support for an account that does not have a photo of you, you will receive an automatic email response from Meta Support. In order to verify your identity, we will ask you to provide the email address or phone number that you provided during registration, as well as the type of device from which you registered (for example, iPhone, Android device, iPad, etc.). nine0003

If you request support for an account that contains a photo of you, we will ask you to take a video selfie of you turning your head in different directions. This way we can verify that you are a real person and confirm your identity.

After sending a video selfie, you will receive an email from Instagram to the email address you provided. With the help of this video, we will be able to verify that you are a real person and verify your identity.

Note. The video you send will never appear on Instagram and will be deleted after 30 days. nine0003

If we can't verify your identity using the received video, you can submit a new one for verification.

Note. Instagram does not use facial recognition, and we do not use this technology for video selfies. A video selfie allows us to verify that you are a real person, and we can manually verify it to grant you access to your account.

If you can log into your Instagram account

If you think your account has been hacked or has been attempted to be hacked, but you can log in, check out our security tips:

Change your password or request an email to reset your password.

Enable two-factor authentication.

Make sure you have the correct phone number and email address in your account settings.

Check the Account Center and remove linked accounts that you don't recognize.

Revoke the permissions of all suspicious third-party applications.

How Instagram accounts are hacked

To protect your Instagram account from hacking, you first need to know how it can be hacked. By understanding how hackers operate, you can protect your account from possible attacks in the future. Most often, those Instagram users who do not know how this process works are hacked. Instagram is one of the world's most popular major social networks, so it's not surprising that a frequent query in search engines is the question of how are Instagram accounts hacked? And what if you can't log into your account? There are a number of ways that will tell you in an accessible way how to use the phone so that no hacker can trap you. nine0003

Why are Instagram accounts hacked?

In most cases, scammers want to gain access to your IG account in order to take advantage of your reputation. With the help of your reputation in the eyes of subscribers, scammers will ask for various things: often money from subscribers with whom they once corresponded in an Instagram direct. If you understand in advance how hackers can hack a site with your data, how a scammer could enter your account, you will significantly reduce the likelihood of future hacking. You should be aware that hacks are prerequisites for serious problems. If you do not know how to properly handle the phone and the network, you can run into the loss of personal data, and your page on the Instagram website will turn into a springboard for fraud, spam messages and publications. A good example can be given of the tragic Instagram account hack that occurred in 2020. A young hacker was able to gain access to a popular person's Twitter account and asked for bitcoins on behalf of the owner of the page. As a result, he was able to earn $2 million worth of bitcoins from followers of celebrities like Elon Max and Bill Gates. That's why you should always be prepared and know how to act if the site is hacked. nine0003

What if someone tries to access Instagram?

A social network like Instagram guarantees its customers reliable protection of personal data, as it is based on a security system based on modern encryption protocols and security tools. This allows you not to worry so much about the safety of information. However, it is still impossible to completely secure an account from the actions of scammers and hackers, especially if a weak password has been set on the account before, and no one is concerned with the issue of personal security. Often, the owner of a personal site on Instagram is primarily to blame for the hacking process, because due to inattention and gullibility, he missed important security points. To know what to do if someone is trying to hack an Instagram account, you first need to know the signs that indicate that the site is being hacked. Social networks, among which the Meta concern, namely FaceBook and Instagram, are the best environment for hackers and intruders. Instagram has reliable modern tools and security systems, but they cannot guarantee the full safety of data. The security of an Instagram profile depends entirely on its owner. It is important to follow the security recommendations of the developers and monitor your account so that unintentional negligence does not cause a site to be hacked. In most cases, the occurrence of such problems is possible due to the inattention of users. During the registration process, the site recommends that you come up with a complex, strong password, which will be the first step in protecting your Instagram account. If you do not pay attention to the password and come up with a weak combination, a hacker can very easily hack the site. Always be on the alert, and do not distribute your confidential information to anyone. You can understand that they are trying to hack you or have already done it based on the basic characteristics:

  • You received notifications in your name from the Instagram resource about suspicious attempts to enter your account, while you did not commit such frauds.
  • After a standard account login, you noticed unusual third-party posts that you never posted publicly yourself.
  • Instagram can also send you messages by email, so check it from time to time if you have even the slightest suspicion of hacking attempts. nine0086
  • Your account was sending private chat messages to subscribers with unknown links, even though you never sent one.
  • When you sign in to your Instagram account, you get an error with an incorrect password or username, although you made sure that you entered the data correctly. Double-check your login details, and if you are sure that your site has been hacked, you need to start trying to restore access. To do this, go through the process of recovering and changing the password for your account using the linked email or phone number. nine0086
  • Very rarely, but this cannot be ruled out, there is a complete blocking of a page that you cannot access. If you know that you did not violate the rules of the Instagram service and did not exceed the limit on subscriptions and mailings, then there is no reason to block the site.

Once you've verified that someone is trying to access your Instagram account or you can't get into your account, it's important to take the following steps first:

  1. inability to enter. If you are firmly convinced that you did not violate the requirements of Instagram and did not post prohibited materials on your account, then your account has become a victim of a hacker attack. It follows from this that all the data has already been changed and is being used for their own selfish purposes. nine0086
  2. You may have been blocked on Instagram due to the publication of prohibited materials or violations of posting and mailing limits. Ban in this case can be both temporary and permanent. In the first case, you just need to wait a couple of hours or days, but in the second you will have to communicate with technical support, proving your innocence.

If you are unable to authorize your account, you can try to start the Instagram account recovery process in the most standard way. There is a specific procedure for resetting and changing the password. nine0003

How to change your Instagram password using email:

  • Open the Instagram app on your phone;
  • In the authorization menu there is a button "Forgot your password?" - press it;
  • Next, a recovery window will appear. Just add the email address to which the account is linked;
  • Go to your mailbox, you should receive a message from Instagram with a link to reset your old password;
  • Follow the link and come up with a new strong combination of characters for the password, confirm it. nine0086

If everything worked out, you can consider that you got off very lightly. Fraudsters can change the email address in the account settings, then they will have to perform the reset procedure through the linked phone number.

How to change password from Instagram using phone number?
  • Launch the app on your phone and select "recover password" on the Instagram login page.
  • Take the phone number as a parameter, enter your contact details in the required line. nine0086
  • Wait for the appropriate SMS notification from Instagram with a link to reset your password.
  • Write a new strong password in the free line.
  • Save your changes and try logging in again.

There are also situations when scammers manage to change all your personal data, replacing your information with their email address and phone number. Still, there is some way out here - you can log in to Instagram using your Facebook social network account. To do this, do the following:

  • Open the Instagram app on your phone.
  • Find the login button for your Facebook profile.
  • Write your Facebook password and login in the required field.
  • You will be able to access the Instagram website.
  • Next, open the settings and set a new login password, attach the desired email and phone number to your account.

It is also important to take into account the fact that this method can bring a positive result only if you have an account in the Facebook affiliate network. At the same time, Instagram and Facebook must be synchronized with each other, in other words, tied. Of course, there are also the most difficult situations when hackers hack all social networks. The procedure for restoring access to them is completely different. nine0003

Can a hacked account be returned?

If all of the above methods did not work, it can mean one thing - the attackers successfully changed your personal data and linked new contact information to your Instagram account. In this case, the only salvation may be to contact the technical support service with the appropriate statement. It also has its own procedure:

  • Open the Instagram app on your phone.
  • In the authorization menu, select "request help signing in". nine0086
  • Enter your phone number and email address. If they are all stolen, you will have to write the username exactly as it sounds in the account.
  • Select Need More Support.
  • A list of common problems should appear on the display. Select the item about hacking the page.
  • Describe in detail the current situation with indication of personal data - login and name, personal data, email address where the answer from the specialist will come.
  • Submit a support request and wait for a response. nine0086

In reviewing your request, the support team may additionally request scanned copies of identification documents and other additional materials, which may speed up the process of regaining access to your Instagram account. It remains to wait for an answer. If you do not want to go through a lengthy check and a long solution to the issue, and your account does not have important data, it will be much easier and faster to create a new account on the site using the standard algorithm. If you received a block due to violations of the rules, be prepared for the fact that you will not be able to return your account - it will be completely blocked. nine0003

What should I do if I can't access Instagram?

In the password recovery window, click "Need more help?" and enter all the requested information. Don't forget to check the box "My account has been hacked" and submit your request. Specify the mail to which the answer from the support service will be received. If there is no answer within a few days, repeat the request, but check the box next to the line "I forgot my mail." To insure and further secure your account, you must do the following:

  1. Check the relevance of Instagram-related resources;
  2. Monitor your account security settings, change your password to a more complex one, using unique combinations of letters and numbers with different cases.

    Learn more