Online Threat Alerts (OTA) - Alerting you to scams and frauds.
Is security mail.instagram.com a Scam

Emails from security@mail.instagram.com can be legitimate, but scammers often spoof this address to steal credentials. Official alerts regarding hacked accounts often prompt users to click fraudulent links, leading to account theft. Always verify by checking Settings > Security > Emails from Instagram in the official app.

Scam Tactics

  • The "Report User" Scam: Emails claim a user was reported and provide a button to "secure your account." Clicking this opens a pre-addressed email to a scammer, not Instagram.
  • Fake Password Resets: Emails warn of login attempts, urging you to "Reset password" on a fake login page.
  • How to Verify: Never click links in unexpected emails. Instead, use the official Instagram app to view authorized security communications.
  • Check Sender Address: While spoofed, some malicious emails may not come from the exact @mail.instagram.com domain.
  • No DMs: Instagram will never send security alerts via Direct Message (DM).

If you clicked a link, immediately change your password in the Instagram app and check for unauthorized apps, as detailed at the Instagram Help Center.

waiting