Millions of Instagram users around the world receive unexpected emails asking them to reset their password. Esses messages, which appear official, are part of a phishing campaign that captures credentials and allows full access to accounts.

Meta, the company responsible for the platform, confirmed the existence of malicious activities exploiting this method. Criminosos send mass emails to steal personal data and permanently block victims.

The campaign gained traction after a patched vulnerability that allowed external reset requests. Embora the technical problem has been resolved, scammers continue to use fake pages to deceive unsuspecting users.

• Emails arrive with a sender similar to the official one, such as security@mail.instagram.com.
• Include Meta and Instagram logos for added credibility.
• They request to click button to “protect” or “reset” the account immediately.
• They redirect to fake websites that imitate the platform’s original interface.

These attacks affect users in Brasil and other countries, with reports increasing in recent weeks.

How the scam works step by step

Criminals use email lists obtained from previous breaches to send personalized messages. The text informs about a supposed password change request, encouraging quick action to avoid blocking.

By clicking on the link, the victim accesses a page that faithfully reproduces the design of Instagram. Lá, the system asks for the current password or a new one, sending the data directly to the attackers.

Scammers immediately change the credentials of the stolen account. Eles remove the associated email and phone number, preventing recovery by the original owner.

This technique also allows fraudulent messages to be sent to the victim’s contacts. Muitos followers receive requests for money or malicious links in the name of the legitimate user.

Origin of data used by criminals

A breach exposed information from around 17.5 million Instagram accounts in a previous period. The data includes usernames, email addresses and phone numbers.

This information currently circulates on the internet black market. Criminosos buy packages to direct precise attacks and increase the chances of success.

On Brasil, the volume of phishing attempts has grown significantly in recent months. Relatórios indicate more than 550 million blocks of attacks of this type in one year.

The combination of leaked data and advanced techniques makes the campaign particularly dangerous. Usuários receive messages that appear legitimate due to the use of real information.

Signs to identify fake emails

Official Instagram emails only arrive from specific domains, such as @mail.instagram.com. Qualquer variation in the sender indicates possible fraud.

The platform never requests passwords via email or direct message. Qualquer request of this type must be ignored immediately.

Checking recent activity directly in the app helps confirm actual requests. Instagram displays history of changes and access attempts.

Fake pages have URL addresses that are different from the official one. Observar details like “instagram-security.net” or variations reveals the fraud.

Protective measures recommended by Meta

Enabling two-factor authentication remains the main barrier against intrusion. Essa function requires additional code sent to the phone or authenticator app.

Changing your password periodically and using strong combinations makes it difficult for criminals to act. Evitar reuse across different services increases overall security.

Instagram offers a tool to view official emails sent in the last 14 days. Essa option is available in the account security settings.

Reporting suspicious messages directly on the platform helps with quick blocking. Meta removes malicious content identified by users.

Growth of phishing in Brasil

The country records millions of daily phishing attack attempts on various platforms. Dados recent data show an average of 1.5 million blocked incidents per day.

Techniques involving social networks have gained ground among criminals. Instagram and other similar applications concentrate a large volume of cases.

Security companies have detected an increase of more than 600% in certain periods. Trojans banking and email fraud lead identified threats.

Brazilian users represent a constant target due to the high number of active accounts. Campanhas globals adapt messages for local audiences.

Consequences for victims of account theft

Loss of access prevents recovery of photos, videos and contacts accumulated over the years. Muitos personal and professional profiles are permanently compromised.

Criminals use stolen accounts to apply new scams to followers. Pedidos of false loans or donations generate additional financial losses.

Resale of valuable profiles often occurs on the illegal market. Contas with many followers fetch high prices among fraudulent advertisers.

Recovery requires direct contact with platform support. The process requires proof of identity and can take weeks or months.

Practical tips for greater digital security

• Always check the full sender before opening any email.
• Access official websites by typing the address directly into the browser.
• Use password managers to create and store complex combinations.
• Regularly monitor suspicious account activity.
• Educate family members about common risks on social media.

Keeping applications and operating systems up to date fixes known vulnerabilities. Frequent Atualizações include important security patches.

Avoiding clicking on shortened or unknown links reduces exposure to malicious pages. Copiar addresses for prior analysis help with identification.

Participating in educational campaigns strengthens collective protection. Compartilhar correct information contributes to a lower rate of victims.

Constant vigilance remains essential in today’s digital environment. Ataques evolve quickly, requiring continuous adaptation of defense measures.