Fake Instagram Copyright Strike Phishing Scam
Scammers send emails or DMs posing as Instagram's rights team, claiming a post has been flagged for a copyright violation and threatening account suspension unless the creator provides credentials or pays a fee to appeal.
Part of: Copyright Strike & Takedown Phishing
Last reviewed: 8 June 2026
Instagram uses an automated rights-management system to handle copyright complaints, similar in concept to the DMCA process. Creators are familiar with the idea that a single copyright strike can restrict or disable their account, which makes this category of threat particularly anxiety-inducing.
Fraudulent copyright notices exploit this fear by claiming that one or more posts on the victim's account contain unlicensed content. The notice threatens imminent account suspension and provides a link or contact to 'appeal the decision immediately'. The urgency and the real consequences of a genuine copyright strike lower the victim's critical thinking.
The appeal link leads to a fake Instagram login page or a form that collects personal information and credentials. In some variants, a fee is requested via a payment link to 'process the appeal' — a charge that Instagram's real process never involves.
How this scam works on the Instagram brand
Instagram sends genuine copyright notifications through the app's notification panel and to the email registered on the account, from @mail.instagram.com or @instagram.com addresses. The real notification links to a dispute form within the Instagram app or at help.instagram.com — never to an external third-party page.
The scam message typically claims to come from Instagram's 'Copyright and Rights Management Team' and lists a specific post or piece of content. It may include a fabricated case reference number. The tone is formal and the visual design mimics Instagram's official notification emails closely.
Clicking the appeal link opens a page that asks for your Instagram username and password. After capturing these, the page may show a fake 'Your appeal has been submitted' message, while the attacker uses the stolen credentials to take over the account.
Common red flags
- An email or DM about a copyright strike comes from an address that is not @instagram.com or @mail.instagram.com.
- The appeal or dispute link goes to a site other than help.instagram.com or instagram.com.
- You are asked to pay a fee or provide payment details to resolve the copyright issue — Instagram does not charge appeal fees.
- The message threatens permanent account deletion within hours unless you act immediately.
- The DM comes from a private account, not from Instagram's own verified blue-tick account.
- The appeal form asks for your Instagram password — genuine Instagram dispute forms do not require your password.
How to protect yourself
- Check all genuine copyright notifications by opening the Instagram app and going to Settings > Help > Support Requests.
- Enable two-factor authentication on your Instagram account to limit damage from any stolen password.
- Never pay a fee to resolve an Instagram copyright notice — Instagram's dispute process is free.
- If you receive a DM about a copyright claim, treat it with scepticism; real copyright notices arrive via email and in-app notification.
- Bookmark help.instagram.com as your only source for account support and dispute resolution.
- If you entered your password, change it immediately and check recent login activity at Settings > Security > Login activity.
How to report it
- Report the scam email or DM to Instagram by tapping the three-dot menu on the message and selecting 'Report'.
- Forward the phishing email to [email protected].
- Report the scam to the FTC at ReportFraud.ftc.gov (US) or Action Fraud at actionfraud.police.uk (UK).
- If your account was taken over, go to instagram.com/hacked to begin recovery.
Frequently asked questions
How does Instagram actually handle copyright strikes?
Instagram's real copyright process notifies you through the app and via email from @instagram.com addresses. You can dispute the claim through a form within the app or at help.instagram.com — no password re-entry or fee is required.
Can one copyright strike delete my Instagram account?
A single copyright strike typically results in the removal of the specific post rather than instant account deletion. Repeated violations can lead to account disabling, but the process has multiple notification steps — there is never a one-hour ultimatum.
I entered my password in the fake appeal form. What should I do?
Change your Instagram password immediately at instagram.com, then review and terminate any unfamiliar active sessions at Settings > Security > Login activity. Also check that your recovery email and phone number have not been changed.