Buckle up, social media users, because hackers are having a field day on Instagram. About 13% of Americans have been hacked on Instagram, according to NordVPN. And while hijacking on all social media platforms rose tenfold in the last year, Instagram users have taken the brunt of it. In a new Identity Theft Resource Center (ITRC) survey, 85% of the social media hacks reported to the group involved Instagram accounts. So, how do Instagram accounts get hacked?
This information is essential if you want to avoid losing all your vacay pics, first-day-of-school poses and cute pet posts. Yep, that’s right—those posts might disappear forever. Only 30% of users are able to recover their account after Instagram hacking. And that may be the least of your problems. Of all the online scams, “this type of identity crime has a profound financial and emotional impact on victims,” says James E. Lee, ITRC’s chief operating officer. More than 80% of ITRC’s survey respondents said they felt anxious and violated after they were hacked. Plus, cybercriminals could walk away with your money and the ability to create fake Instagram accounts in your name.
Here’s what you need to know about this type of hack and how to level up your Instagram account’s security with just a few simple steps. When you’re up to speed, find out how to recover a hacked Facebook account, just in case you’re hit with a hack there as well.
Get Reader’s Digest’s Read Up newsletter for more tech, humor, cleaning, travel and fun facts all week long.
Hackers have all kind of tricks up their sleeves, and the bottom line is, you need to be smarter than they are. Luckily, a little knowledge will go a long way.
RD.com
About half of hackers gain access through phishing links, when users click on a link in their direct messages on Instagram, according to Lee.
“The links are usually in direct messages that appear to be from one of the victims’ Instagram followers,” he says. “But the follower’s Instagram has been compromised.” For example, you might receive a DM from a work buddy asking you to take a survey. You instinctively click on the link, and when you do, malware infects your device and gives the hacker access to your account.
In another common hack, you’ll receive “suspicious activity alerts” that appear to be from Instagram … but aren’t. These alerts contain links that will compromise your account. Variations on this theme include someone claiming that you infringed on their copyright or even offering you a verified badge.
Security breaches on e-commerce sites are the gifts that keep on giving to criminals—and they’re more common than you think. Let’s say you bought a cute top from a small business’s website, and that site is compromised. The hacker may now be within striking distance of your Instagram account.
“Hackers will try those passwords on your other accounts and see if there’s a match,” says Samuel Mulder, PhD, an associate research professor at Auburn Cyber Research Center in Alabama. If your Insta password matches the one you used for this business, the hacker can easily get into your account. That’s why good passwords—and different passwords—are so important.
RD.com
Whenever you connect to public Wi-Fi, your data is in danger. In an effort to lure you in, hackers sometimes create an open hotspot with a name that sounds similar to a common hotspot—for example, an airport or restaurant nearby. Then, when you try to connect, they steal your data and inject malware into connected devices.
Finally, you may unwittingly hand over your username and password to a hacker through a third-party app. This might happen when you download an app to schedule your posts or see who unfollowed you on Instagram.
Some of these apps ask you to enter your password. Don’t do it! Download the wrong app and your account will be compromised. Wondering if you can see who views your Instagram profile? We have the answer.
While an attack on your Instagram account feels very personal, it’s just business for hackers. Here’s the type of havoc they can wreak once they have access to your account.
Cryptocurrency is the big scam at the moment—after all, who wouldn’t want to make some easy cash fast? Hackers will post as you on your account and encourage your followers to invest in bitcoin and other types of cryptocurrency. Of course, there’s no actual investment, only a scam that swindles money from unsuspecting friends and family members. “One victim told us that hackers took almost $10,000 from their followers,” says Lee.
Hackers often target social media accounts with large followings.
These influencers typically recommend products and get a percentage of the sales when someone purchases the product through their link. When an account gets taken over, that money funnels to the hacker instead of the influencer. In the ITRC report, 51% of victims reported losing sales revenue in this way.
In some instances, Lee says, the hacker will contact the account owner and demand a ransom to turn over the account. “Don’t pay the ransom,” Lee warns, “because you won’t get your account back and you’ll be out even more money.”
Hackers can use your account to set up drug deals or ask other Instagram users for pornographic photos. This isn’t only embarrassing—it can also get you in hot water with the authorities.
Hackers can sell an entire account on the “dark web,” a hidden part of the internet that’s available only on special web browsers. There, cybercriminals buy and sell Instagram accounts for the purpose of spreading propaganda or trying to scam your followers.
According to PrivacyAffairs.com, a typical Instagram account fetches around $45, so it’s affordable to them but potentially devastating to you.
Now that you know the answer to “How do Instagram accounts get hacked?” you probably want to do everything you can to avoid all this drama. Here are some simple steps to take.
RD.com
To set up 2FA, tap on your profile picture, tap settings and then tap security. Tap two-factor authentication, and follow the prompts. It takes just five minutes.
Yes, it’s human to want to commiserate and tell all your friends, “My Instagram was hacked!” Of course you’ll do that, but first you need to take a few important steps to protect yourself. No need to Google “what to do if your Instagram is hacked”—we’ve got all the links you need right here.
Now that you know how Instagram accounts get hacked, find out about Facebook’s many scams, including Facebook Marketplace scams.
Sources:
Lee, chief operating officer of Identity Theft Resource Centerⓘ
Instagram is one of the most popular social media apps, so of course, it is a big target for cybercriminals who want to hack into accounts.
So how do people hack your Instagram? What are the consequences of this happening? And what can you do to secure your Instagram account?
Instagram hacking happens in several ways. Many attempts involve social engineering, which manipulates users whose accounts are susceptible to attacks.
These are the most common methods of hacking Instagram profiles.
Some hackers infect computers with keylogging software. It records anything someone types, allowing unauthorized parties to capture your Instagram login details that way.
Alternatively, malicious software could get on your computer after you click a suspicious link or download a dangerous attachment.
Numerous fraudulent websites use phishing tactics to learn passwords or encourage people to sign up to access accounts.
Determined cybercriminals can target accounts to crack them, but obviously, the software they use is illegal in most countries. In some cases, the software itself is fraudulent too, used to trick people who want to get into someone else's profile into falling victim themselves.
Instagram hacks also happen indirectly. Cybercriminals could take over a third-party platform that some people use to access Instagram, compromising all the associated account details in the process.
This is possible through Instagram integrations, as well as linked platforms such as Facebook.
If you use the same password for another account and it's part of a data leak, cybercriminals could hack into your account using this same password.
Alternatively, if your password is too easy for hackers to guess, your account is at risk.
Some hackers trick people into giving up their account details by orchestrating scams. One recent approach making the rounds involves people receiving Instagram messages saying their friends made them gifts. However, the associated link sends people to an external site that steals their passwords.
Cybercriminals also target Instagram and Facebook users with Cash App scams. They promise to send people $850, but experts say falling for this offer could lead to identity theft.
It’s not always skilled hackers breaking into Instagram accounts. How can someone hack your Instagram account if they aren’t a cybersecurity expert? One of the main ways is through purposeful or unintentional device access combined with automatic logins.
Instagram can store information for multiple accounts. However, you can only access them one at a time.
Maybe you often let your housemate or a significant other use your phone to access Instagram themselves. If you later have a falling-out, and they know your password, that party could hack your Instagram.
A similar situation could happen if someone steals your phone, you lose it, or an unauthorized person gets access to your email. These outcomes become problematic if you have the two-factor authentication (2FA) feature activated for Instagram.
Having access to your email or phone could provide a hacker with the 2FA verification code they need to log in to your account without knowing the password. They could then access the account and change the password to something only they know.
The reason for the hack and the methodology used determines what happens after an account hack. In cases where the hacker is someone close to you, you may not notice any changes to your account if the person solely did it to spy on you.
In cases where professional cybercriminals have hacked Instagram profiles, there may be significant changes to the account and its accessibility.
These users will likely find themselves locked out of the account. If someone else controls it, they can change the passwords to keep you locked out of the account.
Cybercriminals often take a particular interest in hacking the accounts of influencers. When people have tens of thousands of followers or more, malicious parties could have a broader reach by compromising those accounts.
Sometimes, internet criminals use special software that launches a brute-force attack against those accounts. Regardless of how the takeover happens, some Instagram influencers reported on BuzzFeed News that contacting the site itself doesn’t often help. Desperation may make them resort to hiring white-hat hackers to resolve the problem.
In some cases, hackers demand a ransom for the account. In other cases, they may change significant details on the account, such as images. Hackers often sell off accounts with many followers or hijack the accounts of specific well-known people for profit.
Instagram’s security features get progressively more advanced in response to hacked user accounts. These changes make it more difficult for hackers to access accounts and easier for affected users to regain access.
If you believe someone has hacked your account, the first step is to report it to Instagram. They will record all the details, examine the case, and assist in getting the service restored as quickly as possible.
The hacker may have also logged you out of your account and changed the password. Select Get Help Logging In (on an Android device) or Forgotten Password? (on an Apple product). You’ll then need to verify your account by entering one of the identity confirmation details, such as a phone number.
If you do not have any of the requested information, choose Need More Help? and follow the on-screen instructions. This is the first step to contacting Instagram’s support team, but you must enter a security code to go further.
It goes to your email address or phone number.
The methods of confirming your identity vary depending on if the Instagram account in question contains pictures of you. If it does not, Instagram’s support team sends an automated email requesting that you provide the following information.
If the compromised account has photos of you, Instagram uses a video-selfie method for verification. It requires turning your head in different directions while creating the clip. The Instagram team reviews the video within two business days.
Passing this test results in getting an email from Instagram containing a link to reset your password. Conversely, you may receive an email requiring the submission of another selfie video.
Additionally, Instagram's Recently Deleted folder is a helpful feature that restores deleted posts, stories, and reels.
Whenever you remove your Instagram content, they first go and stay in the folder for 30 days before being permanently erased.
If you suspect an account hack but can still log in, take the following steps to secure your account:
You can do this in the Security section of your Instagram account, which shows your log inactivity. Remove access from suspicious accounts and apps. You can see the geographic locations of where you’re logged in and which devices are being used. If there are any that you do not recognize, you can log out of them. There are steps you can take to prevent hackers from gaining access to your account.
These steps are simple to take and are more than worth your while: a hacked account can wreak havoc on your privacy and security. Nip it in the bud by taking simple precautions.
Take action on the website or app to secure your Instagram account if you think it has been hacked or is being used by someone else. If someone has accessed your account or you're unable to sign in, visit this page in a browser on your computer or mobile device to help protect your account.
You can also try to restore access according to the instructions below.
Some of the actions listed are not available for all account types, but we recommend trying each one. nine0003
Check if you received an email from Instagram
If you received an email from [email protected] informing you that your email address has changed, please try to cancel and secure your account by clicking on the link. If some other information has changed (for example, the password), and you cannot restore the previous email address, request a login link or Instagram security code.
Request Instagram login link
To help us verify that the account belongs to you, request a login link, which we will send to your email address or phone number.
To request a login link:
Click Get help signing in (Android) or Forgot your password? (iPhone or browser).
Enter the username, email address, or phone number associated with your account and click Next. If you don't have access to that username, email address, or phone number, enter the login information you last used.
Then click Can't reset your password? under the Next button and follow the instructions on the screen. nine0003
Pass verification to verify you are human (browser only).
Select your email address or phone number, and then click Next.
Follow the login link provided in the email or SMS and follow the instructions on the screen.
Request a security code or support on Instagram
If you are unable to recover your account using the login link, please request support.
To do this, follow the steps below. nine0003
Instagram app for Android
Instagram app for iPhone
Enter a secure email address that only you can access. After submitting your request, expect an email from Instagram with further instructions.
Learn more about what to do if you don't know your username.
Verify your identity
If you request support for an account that does not have a photo of you, you will receive an automatic email response from Meta Support.
In order to verify your identity, we will ask you to provide the email address or phone number that you provided during registration, as well as the type of device from which you registered (for example, iPhone, Android device, iPad, etc.). nine0003
If you request support for an account that contains a photo of you, we will ask you to take a video selfie of you turning your head in different directions. This way we can verify that you are a real person and confirm your identity.
After sending a video selfie, you will receive an email from Instagram to the email address you provided. With the help of this video, we will be able to verify that you are a real person and verify your identity.
Note. The video you send will never appear on Instagram and will be deleted after 30 days. nine0003
If we can't verify your identity using the received video, you can submit a new one for verification.
Note. Instagram does not use facial recognition, and we do not use this technology for video selfies.
A video selfie allows us to verify that you are a real person, and we can manually verify it to grant you access to your account.
If you can log into your Instagram account
If you think your account has been hacked or has been attempted to be hacked, but you can log in, check out our security tips:
Change your password or request an email to reset your password.
Enable two-factor authentication.
Make sure you have the correct phone number and email address in your account settings.
Check the Account Center and remove linked accounts that you don't recognize.
Revoke the permissions of all suspicious third-party applications.
To protect your Instagram account from hacking, you first need to know how it can be hacked. By understanding how hackers operate, you can protect your account from possible attacks in the future. Most often, those Instagram users who do not know how this process works are hacked.
Instagram is one of the world's most popular major social networks, so it's not surprising that a frequent query in search engines is the question of how are Instagram accounts hacked? And what if you can't log into your account? There are a number of ways that will tell you in an accessible way how to use the phone so that no hacker can trap you. nine0003
In most cases, scammers want to gain access to your IG account in order to take advantage of your reputation. With the help of your reputation in the eyes of subscribers, scammers will ask for various things: often money from subscribers with whom they once corresponded in an Instagram direct. If you understand in advance how hackers can hack a site with your data, how a scammer could enter your account, you will significantly reduce the likelihood of future hacking. You should be aware that hacks are prerequisites for serious problems. If you do not know how to properly handle the phone and the network, you can run into the loss of personal data, and your page on the Instagram website will turn into a springboard for fraud, spam messages and publications.
A social network like Instagram guarantees its customers reliable protection of personal data, as it is based on a security system based on modern encryption protocols and security tools. This allows you not to worry so much about the safety of information. However, it is still impossible to completely secure an account from the actions of scammers and hackers, especially if a weak password has been set on the account before, and no one is concerned with the issue of personal security.
Often, the owner of a personal site on Instagram is primarily to blame for the hacking process, because due to inattention and gullibility, he missed important security points. To know what to do if someone is trying to hack an Instagram account, you first need to know the signs that indicate that the site is being hacked. Social networks, among which the Meta concern, namely FaceBook and Instagram, are the best environment for hackers and intruders. Instagram has reliable modern tools and security systems, but they cannot guarantee the full safety of data. The security of an Instagram profile depends entirely on its owner. It is important to follow the security recommendations of the developers and monitor your account so that unintentional negligence does not cause a site to be hacked. In most cases, the occurrence of such problems is possible due to the inattention of users. During the registration process, the site recommends that you come up with a complex, strong password, which will be the first step in protecting your Instagram account.
If you do not pay attention to the password and come up with a weak combination, a hacker can very easily hack the site. Always be on the alert, and do not distribute your confidential information to anyone. You can understand that they are trying to hack you or have already done it based on the basic characteristics:
Double-check your login details, and if you are sure that your site has been hacked, you need to start trying to restore access. To do this, go through the process of recovering and changing the password for your account using the linked email or phone number. nine0086 Once you've verified that someone is trying to access your Instagram account or you can't get into your account, it's important to take the following steps first:
nine0086 If you are unable to authorize your account, you can try to start the Instagram account recovery process in the most standard way. There is a specific procedure for resetting and changing the password. nine0003
How to change your Instagram password using email:
nine0086 If everything worked out, you can consider that you got off very lightly. Fraudsters can change the email address in the account settings, then they will have to perform the reset procedure through the linked phone number.
There are also situations when scammers manage to change all your personal data, replacing your information with their email address and phone number.
Still, there is some way out here - you can log in to Instagram using your Facebook social network account. To do this, do the following:
It is also important to take into account the fact that this method can bring a positive result only if you have an account in the Facebook affiliate network. At the same time, Instagram and Facebook must be synchronized with each other, in other words, tied. Of course, there are also the most difficult situations when hackers hack all social networks. The procedure for restoring access to them is completely different. nine0003
If all of the above methods did not work, it can mean one thing - the attackers successfully changed your personal data and linked new contact information to your Instagram account.
In this case, the only salvation may be to contact the technical support service with the appropriate statement. It also has its own procedure:
In reviewing your request, the support team may additionally request scanned copies of identification documents and other additional materials, which may speed up the process of regaining access to your Instagram account.
It remains to wait for an answer. If you do not want to go through a lengthy check and a long solution to the issue, and your account does not have important data, it will be much easier and faster to create a new account on the site using the standard algorithm. If you received a block due to violations of the rules, be prepared for the fact that you will not be able to return your account - it will be completely blocked. nine0003
In the password recovery window, click "Need more help?" and enter all the requested information. Don't forget to check the box "My account has been hacked" and submit your request. Specify the mail to which the answer from the support service will be received. If there is no answer within a few days, repeat the request, but check the box next to the line "I forgot my mail." To insure and further secure your account, you must do the following:
