Hacked Friend Scams on Instagram
Scammers take over Instagram accounts to message followers with fake investment tips, 'vote for me' links, or urgent requests that steal logins or money.
Part of: Hacked Friend Scams
Last reviewed: 1 June 2026
On Instagram a hacked friend scam reaches you through a DM from someone you follow and trust. A message asking you to 'vote' in a contest, check out an investment they profited from, or help with an urgent problem carries the weight of a real relationship, even though the account is now in a scammer's hands.
Accounts are typically hijacked via phishing links that harvest logins, frequently the very links the scam itself spreads. Once inside, the scammer uses the friend's voice and audience to pull followers into the same trap.
How this scam works on Instagram
A DM from a followed account asks you to vote in a competition, claims a crypto or trading win and offers to 'help you do the same', or describes an urgent need. A link is pushed to a phishing page or a fake investment site.
Clicking and entering your login hands the scammer your account; sending money to the 'investment' or emergency loses your funds. Your hijacked account then DMs your followers with the same script.
The trusted source and the fear of missing out or letting a friend down are designed to prompt a click before you verify.
Common red flags
- A followed account DMs you to 'vote' via a link or claims an investment win
- A link leads to a login or sign-up page after the DM
- You are urged to act fast to help the friend or not miss out
- The message style or topic is unlike that person
- You are asked to send money or crypto to copy their 'success'
- The account recently posted out-of-character promotions
How to protect yourself
- Verify with the friend through another channel before clicking or sending
- Never enter your Instagram login on a page reached from a DM link
- Be sceptical of 'voting' links and investment tips from DMs
- Enable two-factor authentication on your Instagram account
- Do not send money or crypto on the strength of a DM
- Report the account if compromised and warn the real friend
How to report it
- Use Instagram's 'Report' option on the account or DM
- Warn the real friend so they can recover and secure their account
- File a report with your national fraud or cybercrime reporting centre
Frequently asked questions
A friend DMed me a voting link on Instagram — is it safe?
Be cautious. 'Vote for me' links are a common way to phish your login and hijack your account, often sent from a friend whose account is already compromised. Verify with the friend separately and never log in through a DM link.