My Instagram account was hacked, now 'I' am scamming my friends. What can I even do?

asked 11d ago4 views38 answers
0

Feeling totally sick to my stomach. My Instagram was hacked last night, I think around 11 PM GMT. I got a suspicious email, clicked something stupid, and boom, locked out. This morning, my mates are calling me, asking about some 'amazing crypto opportunity' I apparently posted on my stories and DMs. They're seeing messages from *my* account promoting some sketchy investment platform, asking them to send crypto. One friend actually lost a few hundred quid before she realised it wasn't me! I've reported it to Instagram, obviously, but they're useless. I've changed all my passwords everywhere. I feel awful that my friends might lose money because of me. What else can I do? Is there any way to report this so it actually *does* something? I'm in Dublin, Ireland, if that matters.

38 Answers

37

This is a classic 'account takeover' scam, and it's devastating because it leverages trust. First, deep breaths. You're not at fault, the scammers are. The immediate goal is to secure your account. Since you've changed passwords, make sure to enable two-factor authentication (2FA) on ALL your social media and email accounts. This is non-negotiable. For the reporting side, you need to report the *fraudulent activity* to the authorities, not just Instagram. In Ireland, you'd contact An Garda Síochána (your national police force) and also consider reporting to your local financial crime unit. For your friend who lost money, they also need to report it to their bank, and if crypto was sent, to the platform it was sent from. If the scammers are targeting people in other jurisdictions, say, the UK, those victims should report to Action Fraud. It's a complex web, but documenting everything is key. Screenshots of the fake posts, DMs, the suspicious email you clicked – everything.

Khalid Iqbal · Sharjah, UAEanswered 11d ago
47

Liam, I'm so sorry you're going through this. It's a common tactic used by sophisticated scam networks. The initial email was likely a phishing attempt, designed to steal your credentials. Good on you for changing all your passwords and setting up 2FA, that's crucial. Beyond reporting to Instagram and local police, you should file a report with the FBI's Internet Crime Complaint Center (IC3). Even though you're in Ireland, if the scammers are targeting people globally or from the US, IC3 can be a valuable resource for intelligence gathering and linking cases. It also creates an official record of the incident. For your friend who lost money, advise them to immediately contact their bank and the crypto exchange (if one was used) to report the fraudulent transaction. Time is of the essence for any potential recovery or tracing efforts.

Brittany Young · Dallas, USAanswered 11d ago
19

Ugh, I'm so sorry this happened to you. It's truly awful when they use *your* face and *your* name to do this stuff. I had something similar happen a couple of years ago, not Instagram, but an old email account got spoofed and they sent out phishing links to my entire contact list. I felt so violated and embarrassed, even though it wasn't my fault. It took ages to get control back and send out a mass email warning everyone. Just make sure you tell everyone you can, not just who you think saw it, but literally everyone in your contacts or who follows you. Post on another platform like Facebook or Twitter if you have one, or even a public story on Insta saying your account was compromised and to ignore anything from it. It's hard but it's important.

Mia Lefebvre · Montpellier, Franceanswered 11d ago
28

Yeah, this is a huge problem. It's not just your reputation at stake, it's your friends' money. And trust me, Instagram is slow. Like, really slow. What you need to do is send out a warning to everyone you know through other channels ASAP. Like Mia said, use Facebook, WhatsApp, even SMS. Tell them your account was hacked and any messages asking for money or promoting investments are NOT from you. This is CRITICAL. Many of these crypto scams, especially the investment ones, move super fast. The longer it takes to warn people, the more chance someone else falls for it. Don't feel bad about doing this, you're protecting your network.

Leo Michel · Strasbourg, Franceanswered 11d ago
16

Oh wow, that's incredibly stressful, Liam. Don't blame yourself for clicking that link, these phishing attempts are getting scarily good. It's not your fault, it's theirs. The most important thing now is damage control and making sure no one else gets hurt. Make sure you also clear any saved payment methods or linked apps from your Instagram settings if you can get back in. Sometimes they link their own apps or card info to your account. And keep ALL records of your reports and communications. Screenshots, reference numbers, dates, times. It's a long shot but sometimes having that paper trail (digital trail, I guess) can help.

Emma Janssen · Amsterdam, Netherlandsanswered 11d ago
14

Hey, similar thing happened to me last year, different platform, but the feeling is exactly the same. I felt so exposed. It felt like I'd invited them into my home or something, you know? What helped me was constantly checking my other accounts for any unusual activity. They might have tried to use those stolen credentials elsewhere. Also, make sure you revoke access for any suspicious third-party apps connected to your Insta, even after you get back in. Sometimes that's how they maintain access. And don't stop pestering Insta support. Keep submitting reports, from your end and from your friends' ends, about the scam posts. It's a numbers game sometimes.

Levi de Jong · Tilburg, Netherlandsanswered 11d ago
12

C'est terrible! I'm so sorry to hear this, Liam. It's a horrible feeling when your online identity is used against your own network. My cousin went through this with Facebook Messenger, where scammers pretended to be her asking for money for a 'medical emergency'. It's always best to contact your national police, like the Gardaí in Ireland. They might direct you to a cybercrime unit. Also, consider reporting it to the FTC if any of your friends are in the US or Canada, as they also track these types of scams and can sometimes connect dots, especially if it involves international actors. The more places you report, the better the chances of information sharing.

Sophia Gagne · Quebec City, Canadaanswered 11d ago
18

This is literally my worst nightmare. I got a message like that once, but luckily I caught it in time before I clicked. I can only imagine how awful you feel, especially about your friend losing money. You're not stupid, these people are pros at manipulation. Have you tried asking Instagram to *lock* your account temporarily? Sometimes that's quicker than waiting for them to fully recover it. It would stop the scammers from posting more stuff immediately. And maybe even tell your friends to report the posts and messages from your hacked account as spam/scam – sometimes reports from multiple users get Instagram's attention faster than just one victim.

Niamh Smith · Limerick, Irelandanswered 11d ago
11

Totally get it. It's a horrible situation, Liam. Happened to a mate of mine, though thankfully no one lost money then. What I would suggest, beyond all the excellent advice already given, is to really educate your friends about how these scams work. Send them links to legitimate resources about phishing and account takeovers. A lot of people still don't grasp how sophisticated these attacks are, and think 'oh, I'd never fall for that'. But they do. Help them understand that these messages, even from trusted accounts, need extra verification. It's not just about getting your account back, it's about making everyone around you more resilient.

Stefan Wagner · Hannover, Germanyanswered 11d ago
21

This type of social engineering attack, where trust is exploited, is unfortunately rampant. You've taken the right initial steps. From a reporting perspective, beyond national police and platforms like IC3 or FTC, if the scam involves a specific cryptocurrency exchange, even if it's a fake one, sometimes reporting to the *real* exchanges that the scammer might be using for their own transactions can be helpful. They have anti-fraud teams. Also, be wary of 'recovery' services that pop up. Many of those are scams themselves, preying on victims a second time. Focus on official channels and information sharing among your network.

Julia de Boer · Eindhoven, Netherlandsanswered 11d ago
12

This is a classic account takeover leading to social engineering. The scammer is using your compromised account to trick your contacts. Since you're in Ireland, your primary reporting channel for fraud is An Garda Síochána, and potentially Action Fraud if it crosses borders significantly. Given your friend lost money, it's not just an account issue anymore. Get your friend to report the crypto transaction if possible through their bank or the crypto exchange, though that's often a dead end. The key is proving it wasn't you, which is hard. Tip: Always enable Two-Factor Authentication (2FA) on *all* your accounts, especially email and social media. It's the single most effective defense against this kind of hack.

Joshua Pillay · Cape Town, South Africaanswered 11d ago
9

Oh mate, that's rough. I was in a similar spot last year with Facebook. They got my account and started sending out fake job offers. Lost a few hundred myself before I realised. The worst part is the feeling of helplessness, right? Like you're watching a bad movie about yourself. My bank couldn't do much for the crypto part, but I did get my account back after weeks of spamming Instagram support and changing my email. It's a nightmare. Hang in there.

Leo Moreau · Strasbourg, Franceanswered 11d ago
7

Be super careful with anything involving crypto sent from your account. Scammers love this method. If you clicked a link, that email provider might be compromised too. Consider setting up 2FA on your email account ASAP if you haven't already. It's a pain, but it stops this stuff cold. Your friends should also be warned that *any* message from your account could be fake until you can prove it's yours again. Don't trust any DMs from your account for now.

Jules Dubois · Nantes, Franceanswered 11d ago
5

Are you sure it was a hack? Sometimes these 'opportunities' are just friends trying to get you involved in something. But no, usually they're upfront. My cousin tried to get me into some MLM thing once via DM. If your account is truly compromised, reporting to Instagram is the first step, but don't expect much. They're notorious for being slow. Maybe check if any of your friends who sent money have any recourse through their bank or the crypto platform they used? Unlikely, but worth a try.

Mohammed Khan · Abu Dhabi, UAEanswered 11d ago
10

I had this exact thing happen to me two months ago. They changed my email and phone number, I was locked out for 3 weeks. During that time, they were DMing everyone asking for gift cards, not crypto, but same idea. One of my cousins sent $200. I felt so guilty. I finally got it back by spamming their 'hacked account' recovery form and even sent them a video of myself holding my ID. It worked eventually, but the money my cousin lost? Gone. I don't think there's much you can do about the money itself, unfortunately. Just focus on getting the account back.

Hui Lim · Singapore, Singaporeanswered 11d ago
8

Oh no, that sounds incredibly stressful! I'm so sorry you and your friends are going through this. It's completely not your fault. Hackers are just awful people. I'm glad you've changed your passwords. Keep trying with Instagram, and maybe look into reporting it to the Irish Data Protection Commission? They might have some advice or procedures for this kind of breach, even if they can't recover lost funds directly.

Sophie Klein · Dusseldorf, Germanyanswered 11d ago
9

This is a really common attack vector, and it's devastating. They profit from the trust you have with your friends. If your friend sent money via a bank transfer or a specific crypto exchange, she should report it immediately. For crypto, especially if it was sent to a known scam address like the BitForex impersonators, recovery is almost zero. The best thing you can do *now* is get your account back and then broadcast a warning message from your *new* or recovered account explaining what happened and telling people not to trust any messages from your old account, even if they look like they're from you.

Hugo Richard · Montpellier, Franceanswered 11d ago
15

Okay, so this isn't unique to Instagram. Scammers hit all platforms. Your priority is securing your account, which you've started. Second is damage control for your friends. They need to report the crypto transaction to their bank if they used one, or the exchange if they can identify it. Many exchanges have a 'report scam' function. Also, file a report with the FBI's Internet Crime Complaint Center (IC3). While they might not recover funds, reports help them track these networks. Pro-tip: Anyone who got scammed needs to screenshot *everything* – the DMs, the fake investment site, the crypto address. Evidence is crucial, even if it feels hopeless.

Ryan Williams · Boston, USAanswered 11d ago
6

This situation is unfortunately common. The scammers exploit your network. Since your friend lost money to what appears to be a crypto scam, you should encourage her to report it to the relevant authorities. In the UK, that would be Action Fraud. Given you're in Ireland, reporting it to An Garda Síochána would be wise. For crypto-specific issues, depending on the platform used, there might be specific reporting mechanisms, but often these are untraceable. Don't blame yourself; focus on remediation.

Hassan Sheikh · Ajman, UAEanswered 11d ago
7

I’ve seen this play out before. Someone gets hacked, and then their friends get bombarded with fake offers. The crypto angle is particularly nasty because it’s hard to trace. Has your friend who lost money reported the crypto wallet address to their bank or the platform they used? Some exchanges will blacklist addresses if enough reports come in. It's a long shot, but worth trying. Also, ensure you're using a very strong, unique password and 2FA on *everything*, not just Insta.

Olivia Ndlovu · Cape Town, South Africaanswered 11d ago
5

Ugh, this is the worst feeling. I had my Amazon account hijacked once and they tried to order a bunch of expensive stuff. Thankfully my bank flagged it. But seeing your own account used for bad things? Horrible. I tried everything to get Amazon to admit fault, but they just said 'change your password'. No help. I ended up just abandoning that account and starting fresh. Maybe that's an option for you? If you can't get it back, at least make a new account and tell everyone to follow that one.

Felix Fischer · Hannover, Germanyanswered 11d ago
8

This happened to my cousin last month. Her account was used for fake concert ticket scams. She was locked out for over a week. She eventually got it back through Instagram's account recovery process, but it took constant nagging. The money lost by her friends was gone though. They reported it to their banks, but because it was sent via Wise (formerly TransferWise) to a crypto wallet, there was nothing the banks could do. It's a tough lesson, but definitely enable 2FA on your email and social media accounts.

Hannah Thompson · Brighton, United Kingdomanswered 11d ago
6

So sorry this happened to you! It's such a violation. If you can't get Instagram to help, maybe reach out to the Irish Council for Civil Liberties? They sometimes have resources for people dealing with online harassment or fraud. It's not their main focus, but they might point you in the right direction for official reporting. And make sure your friends know to *never* send crypto without verifying directly via a different channel (like a phone call).

Ava Cote · Ottawa, Canadaanswered 11d ago
10

My friend had this happen. They got hacked and started asking for money for 'emergency'. One person sent $500. It was a crypto scam too. She eventually got her account back after about two weeks of emails and appeals. The scammer had also tried to change her email associated with the account, but luckily she got an alert from her email provider. Make sure your email account is super secure. Report to the authorities: Your friend who lost money should report it to their local police or financial crime unit. In Canada, it'd be the RCMP's anti-fraud centre.

Samuel Tan · Singapore, Singaporeanswered 10d ago
7

This is exactly what happened to my sister. They convinced her to send them a code from an SMS, thinking it was for verification. Bam. Hacked. They sent out fake lottery winning messages. She was devastated, especially when people asked her if she was okay after sending money. She finally got her account back by going through the Facebook/Instagram help pages repeatedly. Honestly, it felt like she was talking to a bot for ages. The money lost is probably gone.

Isla Martin · Adelaide, Australiaanswered 10d ago
5

Mate, I feel your pain. This happened to me on Facebook Messenger last year. They were sending links to download some dodgy app. I lost access for like, three days. My mates kept asking me what was going on. It was awful. I eventually got it back by trying the 'forgot password' flow a dozen times and having friends report the fake messages. It's just a mess. The only thing I'd say is, make sure your phone number is also linked and secured with a PIN or 2FA if possible.

Sean Kelly · Limerick, Irelandanswered 10d ago
9

Oh no, that's awful. Happened to my cousin too, but with fake Amazon gift cards. She was heartbroken thinking her friends were losing money because of her. She got her account back by going through Instagram's help section and filling out the recovery form multiple times. She also had to prove her identity by sending a video selfie. The money? Gone. She said the hardest part was apologising to everyone who got scammed. Just focus on getting your account back and letting people know.

Tess Meijer · The Hague, Netherlandsanswered 10d ago
14

This happened to my sister as well. They used her account to promote some fake crypto investment. She was heartbroken. She spent weeks trying to get her account back. She had to send Instagram a video of herself holding her ID. Eventually, she got it back. The friends who sent money? Yeah, that money is gone. No recovery. It's a brutal lesson. The main takeaway here for everyone is: if someone you know suddenly starts pushing crypto investments via DM, call them. Don't trust the DM.

Lily Roberts · Leeds, United Kingdomanswered 10d ago
8

Yeah, this happened to my brother. His account was hacked and they were DMing people asking for gift card codes. He felt terrible. He managed to get his account back by repeatedly using the 'forgot password' option and waiting for the recovery codes. It took him about a week. He warned everyone on his other social media to ignore messages from his hacked account. The advice I'd give is to report it to the Dutch police's cybercrime unit, the Politie, if you can find evidence of it originating from or targeting Dutch citizens, otherwise your local force is best.

Liam Janssen · Nijmegen, Netherlandsanswered 10d ago
11

Oh dear, that's a nightmare scenario. It's absolutely not your fault, these hackers are sophisticated. My friend had her account compromised and they posted fake gambling links. She got it back after about 10 days of jumping through hoops with Instagram support. They even asked for a photo of her holding a code. The money lost by her friends? Irrecoverable, sadly. They tried reporting it to their banks, but crypto is just too hard to trace. The biggest thing you can do is warn people and make sure your other online accounts are secure with *different* passwords and 2FA.

Grace Evans · Brighton, United Kingdomanswered 10d ago
5

Oh no, that's a nightmare scenario. As an expert in online security, I can tell you this is a classic account takeover leading to credential stuffing and then social engineering. Instagram's support can be painfully slow; they're swamped. What you need to do NOW is send a formal complaint to the relevant cybercrime unit. For Ireland, that would be your Garda Síochána's cybercrime bureau. Include screenshots of the scam messages, the suspicious email you received, and a timeline. Also, if any of your friends sent money to a specific wallet address, that's crucial info for the authorities. They might be able to trace the crypto, though it's tough. Don't just rely on Instagram's internal reporting.

Sophie Visser · The Hague, Netherlandsanswered 10d ago
4

Ugh, reading this makes my stomach churn. It happened to me last year, though thankfully not on Instagram. My Facebook got hijacked and they were trying to sell fake concert tickets. My sister almost bought one, bless her heart, she sent me a screenshot asking if it was legit. I was locked out for like three days, felt so powerless. I finally got it back by going through Facebook's 'verify my identity' process, which was a whole ordeal with sending selfies and stuff. What I learned is to enable two-factor authentication (2FA) on *everything*. Use an app like Google Authenticator, not just SMS, because SMS can be hijacked too. It’s a hassle to set up, but seriously, it’s a lifesaver. My account's never been touched since. Good luck, I hope you get it sorted.

Sara Al Hashemi · Sharjah, UAEanswered 10d ago
3

This sounds like a total mess. But honestly, are your friends really sending crypto just because of a post? I mean, come on. People need to be more skeptical. If it sounds too good to be true, it probably is. My cousin got hit by something similar but on WhatsApp. Some 'bank manager' messaged him saying his account was flagged and he needed to 'verify' details via a link. He was this close to doing it! I told him, 'If the bank needs you, they'll call you, or you go to the branch. You don't click links from random numbers.' So, yeah, Instagram might be the vector, but maybe the scam is also on your friends for not questioning it more? Just saying.

Lerato Mokoena · Cape Town, South Africaanswered 10d ago
4

This is exactly why I stopped using Instagram for anything important. Too many dodgy links, too many people getting scammed. I had a similar issue a few years back; my account got cloned, and someone was DMing my family members asking for urgent money transfers, claiming I was stranded abroad. I was horrified. The only reason my mum didn't send anything was because my dad happened to call me at that exact moment and I told him I was at home watching TV. Phew. The official channels for reporting are usually terrible. What worked for me was contacting Action Fraud in the UK. They took down the details and said they'd investigate, though I never heard back directly. But you HAVE to report it there. It helps build a case even if your specific case doesn't go anywhere immediately. Keep all evidence!

Andreas Weber · Stuttgart, Germanyanswered 10d ago
2

Wait — so you clicked a dodgy link and now your account is spewing out crypto scams? And you're surprised Instagram is useless? That's just how these platforms operate. They don't care about your account, they care about ad revenue. The fact that your friend lost money is terrible, but honestly, if they're still falling for 'amazing crypto opportunities' in this day and age... I don't know. Maybe use this as a lesson to tell *all* your friends and family to enable 2FA. Like, immediately. And maybe stop posting about crypto if you were doing that? I dunno. It's a mess, for sure.

Eva de Jong · Utrecht, Netherlandsanswered 10d ago
5

Mate, that's rough. I've had friends go through similar things. My mate Dave's account got hacked and they started DMing people asking for gift card codes to 'help him out'. He was so embarrassed when he got it back. The main thing is to act fast. You've changed passwords, which is good. Have you contacted your bank? If your friend paid via PayPal or a bank transfer, they might be able to flag it or even reverse it, though with crypto it's usually a lost cause. For reporting, besides Instagram, you should definitely file a report with the UK's Action Fraud. They're the national reporting centre for fraud and cybercrime. Go to their website and fill out the online form. They take reports seriously, even if the outcome isn't immediate. Every bit of data helps them track these scam networks.

James Wright · Manchester, United Kingdomanswered 10d ago
6

This is a common attack vector. They compromise your account, then use it to scam your contacts, often via DMs or fake posts. The goal is to exploit trust. Since you're in Ireland, you should report this to your national Garda Síochána cybercrime unit. If friends sent money to specific cryptocurrency addresses, that information is vital. Law enforcement agencies globally, including bodies like the FBI IC3, work with crypto tracing firms, but it's an uphill battle once funds are mixed or moved. The key takeaway here for everyone reading is not just *reporting* but *prevention*. Enable Two-Factor Authentication (2FA) on Instagram and all critical accounts. Use a strong, unique password manager. And educate your friends and family about common crypto scams – if it sounds too good to be true, it is.

Joshua Chua · Singapore, Singaporeanswered 10d ago
3

Okay, so you got hacked. Sucks. But blaming Instagram? Nah. You clicked a bad link. That's on you. And now your friends are losing money? That's on them for being gullible, tbh. I mean, who sends crypto to some random account based on an Instagram story? My uncle almost fell for a scam where someone pretended to be HMRC asking for back taxes via Bitcoin. I told him, 'If HMRC wants money, they send a letter, and you go to their official website, not click some link in an email.' It's basic common sense. You should tell your friends to stop being so trusting. Maybe set up 2FA on your account if you can get it back, but honestly, it feels like damage control at this point.

Amelia Harris · Sheffield, United Kingdomanswered 10d ago

Your answer

You'll be asked to sign in to post.