Verification Badge Phishing Scams on Instagram
Scammers pose as Instagram support staff offering to apply the coveted blue verification checkmark, tricking creators and businesses into handing over their login credentials or paying fraudulent fees.
Part of: Verification Badge Phishing Scams
Last reviewed: 1 June 2026
The Instagram blue verification badge signals authenticity and confers significant commercial credibility. This desirability makes it a persistent lure for phishing attacks targeting creators, small businesses, and public figures who aspire to the status marker.
Fraudsters send messages through Instagram DMs, email, and even WhatsApp claiming to be Meta or Instagram staff with the ability to expedite verification. Their goal is to harvest login credentials or charge upfront fees for a service they cannot deliver.
How this scam works on Instagram
A DM arrives from an account impersonating Instagram or Meta support, claiming the recipient has been selected for verification based on their follower count or content quality. The message includes a link to a convincing fake portal that requests the account's username, password, and sometimes a two-factor authentication code.
Other variants take the form of emails that mimic official Instagram communications, complete with the Instagram logo and a case number, directing the recipient to a support site where they enter their credentials. Some include a step requesting payment of a processing fee — ranging from a small sum to several hundred dollars — before the badge is 'applied'.
Some operators establish a longer con, initially providing 'form-based' verification requests that feel legitimate, then following up with requests for more sensitive information or payment once trust is established.
Common red flags
- DM from an account claiming to be Instagram or Meta offering verification without a prior application
- Verification portal link with a domain that is not instagram.com or about.meta.com
- Request for your current password to 'authenticate your account' for the verification process
- Fee required to process, expedite, or apply the verification badge
- Message asking you to enter a two-factor code from your authenticator app on an external site
- Promises of verification within a specific short timeframe such as 24 or 48 hours
How to protect yourself
- Apply for verification only through Instagram's official settings — no external portal or support DM is required
- Enable two-factor authentication on your Instagram account to limit damage from credential compromise
- Never pay a fee to obtain a verification badge — Instagram's official process is free
- Verify any 'support' communication by cross-referencing with Instagram's official help centre
- Report impersonation of Instagram or Meta accounts immediately using the in-app report function
- Check the sending domain carefully if the approach comes via email — spoofed domains are a common indicator
How to report it
- Use Instagram's in-app 'Report' feature on the offending account and select 'Pretending to be Instagram'
- Report phishing emails to Meta's dedicated phishing address ([email protected]) and your email provider
- File a complaint with your national consumer protection authority if you paid a fee to a fraudulent service
Frequently asked questions
I entered my password on a fake verification site — is my account already gone?
Not necessarily, but act immediately: change your password from a device you trust, log out of all other sessions in Instagram's security settings, and enable two-factor authentication. The faster you act after entering credentials on a phishing site, the better your chance of regaining full control before the attacker changes your recovery details.
Can I pay to speed up my verification application?
No — Instagram's official verification application is free, and no payment of any kind speeds up or guarantees approval. Any request for payment tied to verification, regardless of who is asking, should be treated as fraudulent.
How do I apply for the real Instagram verification badge?
Go to your account settings and look for 'Request Verification' under the account section — this is the only legitimate application path. It requires meeting Instagram's own eligibility criteria around notability and authenticity, and there's no guaranteed approval or timeline.
Does Instagram ever contact creators directly to offer verification?
Occasionally Meta reaches out proactively about verification for notable accounts, but it always uses messages sent through official in-app notifications or verified email addresses. These communications never ask for your current password or a fee, and they never link to external portals.