Verification Badge Phishing Scams on Instagram
Scammers pose as Instagram support staff offering to apply the coveted blue verification checkmark, tricking creators and businesses into handing over their login credentials or paying fraudulent fees.
Part of: Verification Badge Phishing Scams
Last reviewed: 1 June 2026
The Instagram blue verification badge signals authenticity and confers significant commercial credibility. This desirability makes it a persistent lure for phishing attacks targeting creators, small businesses, and public figures who aspire to the status marker.
Fraudsters send messages through Instagram DMs, email, and even WhatsApp claiming to be Meta or Instagram staff with the ability to expedite verification. Their goal is to harvest login credentials or charge upfront fees for a service they cannot deliver.
How this scam works on Instagram
A DM arrives from an account impersonating Instagram or Meta support, claiming the recipient has been selected for verification based on their follower count or content quality. The message includes a link to a convincing fake portal that requests the account's username, password, and sometimes a two-factor authentication code.
Other variants take the form of emails that mimic official Instagram communications, complete with the Instagram logo and a case number, directing the recipient to a support site where they enter their credentials. Some include a step requesting payment of a processing fee — ranging from a small sum to several hundred dollars — before the badge is 'applied'.
Some operators establish a longer con, initially providing 'form-based' verification requests that feel legitimate, then following up with requests for more sensitive information or payment once trust is established.
Common red flags
- DM from an account claiming to be Instagram or Meta offering verification without a prior application
- Verification portal link with a domain that is not instagram.com or about.meta.com
- Request for your current password to 'authenticate your account' for the verification process
- Fee required to process, expedite, or apply the verification badge
- Message asking you to enter a two-factor code from your authenticator app on an external site
- Promises of verification within a specific short timeframe such as 24 or 48 hours
How to protect yourself
- Apply for verification only through Instagram's official settings — no external portal or support DM is required
- Enable two-factor authentication on your Instagram account to limit damage from credential compromise
- Never pay a fee to obtain a verification badge — Instagram's official process is free
- Verify any 'support' communication by cross-referencing with Instagram's official help centre
- Report impersonation of Instagram or Meta accounts immediately using the in-app report function
- Check the sending domain carefully if the approach comes via email — spoofed domains are a common indicator
How to report it
- Use Instagram's in-app 'Report' feature on the offending account and select 'Pretending to be Instagram'
- Report phishing emails to Meta's dedicated phishing address ([email protected]) and your email provider
- File a complaint with your national consumer protection authority if you paid a fee to a fraudulent service
Frequently asked questions
Does Instagram ever contact creators directly to offer verification?
Occasionally Meta reaches out proactively about verification for notable accounts, but it always uses messages sent through official in-app notifications or verified email addresses. These communications never ask for your current password or a fee, and they never link to external portals.