New scam campaign on Instagram: account verification Security


A new scam and phishing campaign is running and targeting Instagram account owners with an interesting amount of followers: verifying your identity.

We've been informed that a new Scam and Phishing campaign is running and targeting Instagram account owners with an important number of followers (10K or more). The campaign allegedly contacts owners to start a verification process for their accounts, and to allow marking the account with a “badge”. By following the link, the victim is redirected on a website that looks and feels like the original Instagram page, and asks for your credentials. Once such credentials are entered, the attacker can gain access to the account and cut the rightsholder out of it.

The Instagram "badge" verification

The badge near your Instagram account can only be requested by the owner: there is no verification process initiated by the social network managers. You can find the information on the official Instagram guide here.

The verification process takes some time and there is a tricky part to have a badge: “your account must represent a well-known, highly searched for person, brand or entity. We review accounts that are featured in multiple news sources, and we don't consider paid or promotional content as sources for review” (source: the Instagram help page)

In other words, you must provide a set of sources where you appear on newspapers, TV shows or have an important media appearance.

How to protect your account

Recovering a lost account may require a charge to your local police prior to requesting an access back to your profile.

We strongly suggest you distrust e-mail messages inviting you to provide your credentials and following such links. Also it may be a good idea to activate the Two Factor Authentication mechanism, that will provide additional security by sending a SMS message to you each time you will be accessing your profile from a different device.

Do you have any questions?

Rights Chain is constantly working on solutions to protect your creativity and intellectual property online. This also includes the ways you share your contents online. Do you wish to know more or keep up to date about your rights? Follow us on our social media and, if you wish, share this post to let more people know about this risk.

Heading photo by freestocks.org on Unsplash

 

Sebastian Zdrojewski

System, Network and Data Security advisor for over 20 years, in 2017 co-founded Rights Chain, a company aiming the development of copyright and intellectual property protection and enforcement solutions.


Last update 2019-03-07


#Scam, #Instagram, #Security, #Account, #Socialnetwork, #Identity, #Phishing

Last articles


Getty Images shuts down Rights Managed model for a Royalty Free

by Sebastian Zdrojewski, 2019-11-11

If you are a Getty Images subscriber or photographer, you probably received an advisory where the licensing model turns from a Rights Managed (RM) model to a Royalty Free (RF) licensing mode. What's going on?

Using Rights Chain: commissioned works

by Sebastian Zdrojewski, 2019-10-25

This week we start a column of articles to talk about the reasons why it is important to think about copyright. Our first example will be about works done on commission.

EU Directive on Copyright: for big publishers, but not for independent authors

by Sebastian Zdrojewski, 2019-09-09

Long story short: in the next two years, all EU countries will have to adhere to the new directive on copyright. But what's hiding behind this new work that is supposed to protect creators?

So, what happens when your art gets posted by an influencer?

by Sebastian Zdrojewski, 2019-06-16

What happens when your art gets posted on a social media by an influencer like Elon Musk?