Fake Instagram ban and copyright emails: how to spot them

What to do first

Do not click anything in the message. Close it, open the Instagram app yourself, and look at the account status and the app’s list of recent emails. A real notice about your account will also appear inside the app, usually with an option to appeal there.

Step 1: Check Instagram’s list of recent emails

In the app go to Settings and look for Recent emails in the Meta Account or Accounts Center security area. Security emails from the past 14 days are listed under Security. Instagram’s help page says to treat a message that isn’t listed there as suspect.

Step 2: Look for the usual red flags

• A deadline of 24 or 48 hours, or a threat to delete the account.
• A button that opens a form asking for your password, login code or card details.
• A link to a domain that isn’t one of Instagram’s own, even if the text looks right.
• A “copyright violation” with no image, post or link identifying what was reported.
• An offer to keep or verify the badge for a fee.

Step 3: If you already clicked or typed anything

If you entered a password, change it immediately from the app and log out of other sessions. Turn on two-factor authentication. If you entered a login code, treat the account as compromised and check Accounts Center. If the password no longer works, use instagram.com/hacked and follow the steps in our hacked-account guide.

Step 4: Report the message

Forward phishing emails to Meta using the address in Instagram’s phishing page, and report the DM or profile inside the app. If a genuine copyright claim exists, Instagram’s notice tells you what was removed and how to appeal.

Anatomy of a fake ban email

Phishing messages tend to follow a script. They say your account will be disabled soon, give a short deadline, include a button labelled “Appeal” or “Verify now”, and point to a page that asks for your username and password, sometimes your two-factor code as well. The sender address may look close, such as support@instagram-help.example, and the page address often uses an odd domain or a shortened link.

Genuine Instagram notices don’t need your password to be typed anywhere other than the Instagram login screen, and they never ask you to pay to avoid a ban. If you’re unsure, open the app and check Account Status and the Recent emails list. If the message isn’t there, you can treat it as a fake.

If you run an account for a business

Tell your team about these scams. A common version targets business accounts with a “copyright infringement” notice that links to a form. One tired admin entering the password is enough to lose the account. Agree on a rule that nobody enters Instagram credentials from an email link, ever.

What not to do

• Don’t “appeal” on the page the email links to. Real appeals happen inside Instagram.
• Don’t pay a badge or verification fee to someone who contacted you first.
• Don’t assume it’s real because it uses your username or follower count. Scammers pull those from your profile.

Staying ahead of it

Add two-factor authentication, keep your contact details current, and tell your team if you run a business account. Anyone with access can be tricked, so agree that nobody enters credentials from a link.