Caitlin Sarian warns about a phishing scam where attackers use leaked emails to trick people into sharing Instagram two-factor codes via fake DMs. Once they have your code, they change your password and email, locking you out. Use an authenticator app instead of SMS codes and never share them.
Chapters
I just got a DM about logging in to secure my Instagram. They're asking for a two FA code. What's that? Yep. That's a new phishing scam hackers are using. Stealing your Two Factor Authentication Code. That's how you make your account extra safe, by using two steps to log in. How do they do that? They try to get your email or username from a leaked database. Once they hit the Two Factor Authentication wall, they'll send you a fake DM or email pretending to be either Instagram or someone you know and ask you for the code. And if I give it to them, I'm locked out? Yeah, with your two FA code, they'll bypass the protection and lock you out. I can just change my password though, right? Nope. They' change your email and password. They'll probably impersonate you and use your account to spread malware. Wait, they can do all that? Yep. It's not just about you. It's about your whole network. That's what they want access to. So what's the way around this? How can I stay safe? Obviously, never share your Two Factor Authentication code, because Instagram will never ask for it. Use an authenticator app instead of SMS for your Two Factor Authentication. It's way harder to hack. And definitely enable Instagram's new login request feature. And it'll notify you every time someone tries to log in. This was so helpful. Thanks. Share this with someone you care about and follow us for more tips to keep your account safe.