New scam campaign on Instagram: account verification Security

A new scam and phishing campaign is running and targeting Instagram account owners with an interesting amount of followers: verifying your identity.

We've been informed that a new Scam and Phishing campaign is running and targeting Instagram account owners with an important number of followers (10K or more). The campaign allegedly contacts owners to start a verification process for their accounts, and to allow marking the account with a “badge”. By following the link, the victim is redirected on a website that looks and feels like the original Instagram page, and asks for your credentials. Once such credentials are entered, the attacker can gain access to the account and cut the rightsholder out of it.

The Instagram "badge" verification

The badge near your Instagram account can only be requested by the owner: there is no verification process initiated by the social network managers. You can find the information on the official Instagram guide here.

The verification process takes some time and there is a tricky part to have a badge: “your account must represent a well-known, highly searched for person, brand or entity. We review accounts that are featured in multiple news sources, and we don't consider paid or promotional content as sources for review” (source: the Instagram help page)

In other words, you must provide a set of sources where you appear on newspapers, TV shows or have an important media appearance.

How to protect your account

Recovering a lost account may require a charge to your local police prior to requesting an access back to your profile.

We strongly suggest you distrust e-mail messages inviting you to provide your credentials and following such links. Also it may be a good idea to activate the Two Factor Authentication mechanism, that will provide additional security by sending a SMS message to you each time you will be accessing your profile from a different device.

Do you have any questions?

Rights Chain is constantly working on solutions to protect your creativity and intellectual property online. This also includes the ways you share your contents online. Do you wish to know more or keep up to date about your rights? Follow us on our social media and, if you wish, share this post to let more people know about this risk.

Heading photo by on Unsplash


Sebastian Zdrojewski

System, Network and Data Security advisor for over 20 years, in 2017 co-founded Rights Chain, a company aiming the development of copyright and intellectual property protection and enforcement solutions.

Last update 2019-03-07

#Scam, #Instagram, #Security, #Account, #Socialnetwork, #Identity, #Phishing

Last articles

EU Directive on Copyright: for big publishers, but not for independent authors

by Sebastian Zdrojewski, 2019-09-09

Long story short: in the next two years, all EU countries will have to adhere to the new directive on copyright. But what's hiding behind this new work that is supposed to protect creators?

So, what happens when your art gets posted by an influencer?

by Sebastian Zdrojewski, 2019-06-16

What happens when your art gets posted on a social media by an influencer like Elon Musk?

Digital Art, commissions and scams

by Sebastian Zdrojewski, 2019-03-15

Scam and phishing events happen constantly on daily basis, but the effect on someone’s reputation can be quite tough. Being an Artist and having an important follower base could make you a target for many kinds of “social engineering” attacks

New scam campaign on Instagram: account verification

by Sebastian Zdrojewski, 2019-03-07

A new scam and phishing campaign is running and targeting Instagram account owners with an interesting amount of followers: verifying your identity.