My Instagram was hacked & used for crypto scam, now followers want money back from ME. What do I do?
Feeling totally sick about this. My Instagram account, which I've had for like, ten years, got hacked last week. I clicked a link that looked like it was from a friend about a 'collab' – total idiocy, I know now. Anyway, before I could even get back in, they changed the email, phone, everything. Then, these scammers started posting stuff about 'amazing crypto returns' on my story and in DMs to my followers.
Now, a couple of my actual friends and even some acquaintances have DMed me, super upset, saying they 'invested' like a few thousand bucks because they thought it was me recommending it. They're asking *me* for their money back! I'm completely devastated and freaked out. I reported it to Instagram, but haven't heard much. Is there *anything* I can do? For my friends who lost money, or for me, to prove I wasn't involved? I feel like I'm going to be blamed for this forever.
19 Answers
Oh no, Jack, I'm so sorry you're going through this nightmare. I had a similar scare with my banking app after getting a weird text. Didn't fall for it fully, thankfully, but it showed me how easily these things can happen. For your friends, they need to report it to their banks if they used bank transfers to buy crypto that then went to the scammers, or to the crypto exchange if they bought it there. Some exchanges like Coinbase might have some internal processes, but it's a long shot. The main thing is for *them* to report their losses, not you. You're the victim of the hack, they're the victims of the investment scam. Two separate, albeit linked, crimes.
Oh man, Jack, this is a super common and truly awful situation. It's not your fault, you were a victim too. First, you absolutely *must* try to regain control of your Instagram account. If the automated recovery isn't working, keep pushing. Sometimes it takes persistence through their help channels.
For your friends, the sad reality is that crypto scams are incredibly hard to recover funds from. The money usually gets moved fast through various wallets and exchanges, often to untraceable offshore accounts. They should report it to their local police and financial crime units. In the UK, that's Action Fraud. They should gather all screenshots, transaction IDs, wallet addresses – everything. While the chances of recovery are low, reporting is crucial for tracking patterns and sometimes, for insurance claims later. Also, tell them to watch out for 'crypto recovery services' that ask for upfront fees; those are almost always scams preying on victims twice.
Ugh, Jack, I'm so sorry this happened to you. It's not your fault at all. The same thing happened to a friend of mine, except it was her Facebook. They used it to promote some fake grant scheme. She felt terrible, but everyone eventually understood she was a victim too.
What she did was immediately post on all her *other* social media (like, Twitter or LinkedIn, whatever you use) that her IG was hacked and to ignore any messages. She also called people directly if she had their numbers. Transparency helps a lot. It's horrible, but you gotta distance yourself from it.
Honestly, the chances of getting any crypto back from these things are practically zero. Once it's off your friend's wallet and into the scammer's, it's gone. Most of these criminal groups are highly organised and move funds through mixers or multiple anonymous wallets within minutes. People fall for these 'investment' pitches because they want quick money, not because *you* recommended it. They saw an opportunity and jumped, sadly.
Dude, don't let them blame you. You didn't steal their money. The scammers did. It's a classic phishing attack you fell for, and then they used your hijacked account to phish others. It's a chain of victims, not perpetrators. Make sure you have all the records of your own account recovery attempts with Instagram. That's your proof. If you can get Instagram to confirm your account was compromised, even better.
It's a tough spot you're in, Jack. I've seen this play out too many times. You need to make sure you have solid proof that your account was compromised. Screenshots of Instagram's non-response, any emails from them, etc. This shows due diligence on your part. For your friends, make sure they understand the path of their funds. If they sent crypto to a wallet address, tracing it with tools like Chainalysis or TRM Labs *might* show where it went, but usually not who owns it. This info can be useful for law enforcement, but direct recovery is rare. Emphasize that *you* are also a victim here. It's not your fault.
Yeah, good luck with Instagram support. They're notorious for being slow or useless when it comes to hacked accounts. Best thing you can do is just explain to everyone what happened, very clearly. Show them proof you were locked out. If people are still blaming you after that, they weren't really your friends to begin with, tbh. It's not on you to replace their money. That's harsh, but true.
Ach, Jack, this is truly awful. Don't carry this burden alone. You are a victim of a cybercrime, and those who lost money are victims of financial fraud. It's not your personal responsibility to reimburse them. Your main focus needs to be on securing your digital life now – change ALL your passwords, enable 2FA everywhere, review your other accounts for any unusual activity. For your friends, direct them to their local police and financial crime units. In the UK, they should report to Action Fraud. They may also want to reach out to their bank or crypto exchange's fraud department. Gathering transaction details (timestamps, wallet addresses) is crucial for any investigation, however slim the chances of recovery.
Hey Jack, I just want to say, please don't let this crush you. These scammers are pros at social engineering; they exploit trust and fear. Anyone could fall for it. Your friends will eventually understand this wasn't you. It's really hard, but you need to be firm that you were hacked and are also a victim. Don't agree to pay anyone back. Encourage them to report to the FBI IC3 if they're in the US, or their local law enforcement. Focus on recovering your own account and securing everything else.
I had a mate who had his Facebook account taken over like this, and they tried to scam his family. It's a horrible situation. The absolute best thing you can do is communicate with your friends directly, outside of Instagram, if you can. Call them, message them on WhatsApp, whatever. Explain exactly what happened and show them you're trying to get your account back. Make sure they understand *you* were compromised, not willingly doing this. It's about damage control and protecting your own reputation, because unfortunately, those funds are almost certainly gone from their end. Nobody here is at fault except the scammers.
This is a classic social engineering attack. The scammers prey on trust. Since they controlled your account, anything posted from it is technically not 'you' endorsing it. Your first step is to get official documentation from Instagram (if possible, though often difficult) proving you lost control of the account and when. Then, advise your friends to file reports with the FBI IC3. They can trace some of this. Also, keep all evidence of your DMs to friends, your own report to Instagram, and any communication where you disavow the scam posts.
Oh god, that sounds like a nightmare. I was in a *very* similar situation last year with my Facebook. They used it to promote some dodgy forex thing. Lost a few grand myself trying to 'recover' it, what a fool. My own cousin sent me money because she thought I was legit. Took me months to get back on my feet, and I'm still dealing with the fallout with some people. What helped me a bit was documenting *everything*. I took screenshots of the fake posts, the DMs from friends asking for money, and my own frantic attempts to get the account back. I even made a new, separate Insta to post a public apology and warning. It didn't fix it, but it helped some folks understand.
This is rough, but I'd be very careful about promising anyone their money back if they sent it to the scammers. It sounds like they fell for a crypto scam, which is often untraceable once the funds move. Did you have two-factor authentication enabled? Because if not, it makes you look a bit careless, and frankly, most of your friends might think the same. Sorry, but that's how it is. They probably won't get their money back unless the crypto exchange they sent it to cooperates, which is rare for small amounts. Maybe check if Binance has any recovery tools, but don't get your hopes up.
The crucial point here is distinguishing between your actions and the actions of the account *after* it was compromised. Legally and technically, once control was lost, the account's activity is no longer attributable to you. Your friends are understandably upset, but their recourse isn't against you personally, it's against the unknown scammers. However, for them to potentially recover funds, they *must* report it immediately to the authorities and any relevant financial institutions. Chainalysis publishes a lot of data on crypto scams and recovery, but frankly, the odds are slim once crypto hits an exchange like Coinbase or Binance, especially if it was immediately moved to mixers. Advise your friends to report it regardless. For you, focus on securing a new account with strong 2FA and a password manager. Document everything for your records.
Oh honey, I am so sorry you're going through this. It sounds incredibly stressful and upsetting, especially when people you know are affected. Don't blame yourself too much for clicking a link – these scams are designed to look so convincing, and we all make mistakes. The most important thing right now is to take care of yourself. It's good you've reported it to Instagram, and keep pushing them. Also, talk to your friends and family, explain clearly what happened. Maybe create a new post on a fresh account or another platform to let everyone know your old account was hacked and *not* to trust any financial advice coming from it. Sending you strength!
This is a significant breach, and the emotional toll must be immense. For your friends who lost money, the primary reporting channel is the FBI IC3 (Internet Crime Complaint Center) in the US, or their local equivalent if they are elsewhere. The details they provide will be critical. Look into services like ChainAbuse, which tracks and reports crypto scams; they might have insights. For your own defense, gather all communications: the initial phishing link (if you can recall details), screenshots of the scam posts, DMs to your friends, and any correspondence with Instagram support. If you can obtain official correspondence from Instagram stating account compromise, that is gold. This isn't your fault, but proactive reporting and documentation are key to mitigating the damage.
Aw, that's absolutely rotten luck, love. It's so easy to fall for those links, especially when they look like they're from a friend. Don't beat yourself up about it. The main thing is to get the word out to everyone *else* who might still see your old posts. Maybe start a new social media page, even just temporarily, and put a big warning on it? Let everyone know your account was hijacked and *nothing* on there is you. Your real friends will understand. It's awful that they lost money, but it really wasn't your fault. You can only do your best to warn people now.
Yeah, this is a common scam vector. Hack an account, blast crypto scams. The question is, are your friends *sure* they sent money to the scammers thinking it was you, or did they just get greedy looking for quick returns? Because if it was the latter, they might not have much sympathy for you. Also, reporting to Instagram is usually a black hole for this kind of thing. You probably won't get your account back easily, and they won't help your friends recover funds. Your friends need to report it to the authorities, but honestly, crypto scams are incredibly hard to trace, especially if they used privacy coins or moved funds through multiple wallets on exchanges like Binance or BitForex impersonators. Don't feel responsible for their losses.
STOP. Do NOT admit fault for your friends' losses. This is critical. They sent money to scammers, not you. Your Instagram account was *hijacked*. Anything posted or DMed from it after the hack is fraudulent. You need to protect yourself first. Create a new, secure account IMMEDIATELY (use a strong, unique password and enable 2FA, maybe Google Authenticator not SMS). On this new account, post a clear, undeniable warning: 'MY INSTAGRAM ACCOUNT WAS HACKED AND USED FOR CRYPTO SCAMS. ANYTHING YOU SEE FROM MY OLD ACCOUNT OR ANY MESSAGES CLAIMING TO BE ME ABOUT INVESTMENTS ARE FAKE. DO NOT SEND MONEY.' Direct all your real friends to this new account. For reporting, have your friends report the scam to the FBI IC3 and their local police. You should also report the account takeover to Instagram again, and if you have proof of the hack (like an email saying your password changed), save it.

