Instagram Copyright Scam Suspends Accounts for Ransom
Scammers are exploiting Instagram's copyright reporting system to temporarily suspend user accounts and demand cryptocurrency for their reinstatement.
A new wave of scams is targeting Instagram users by weaponizing the platform's own copyright reporting system. Threat actors are filing fraudulent copyright complaints against accounts, leading to automated suspensions that lock out legitimate users. Once an account is suspended, the scammers move the conversation to encrypted messaging apps like Telegram, where they demand a ransom, typically paid in cryptocurrency, to withdraw the fake complaints.
This tactic exploits a weakness in Meta's automated complaint processing, which, according to reports, lacks robust initial verification. While Instagram's policies state that only rights holders or their authorized representatives can file complaints, the system's automated nature allows malicious actors to bypass this requirement. Repeated complaints, even if baseless, can trigger temporary account suspensions, disproportionately affecting users who rely on Instagram for their livelihood, such as influencers, artists, and small business owners.
One victim, who runs a history-focused Instagram account, reported being targeted multiple times by the same scammer. Despite paying a $50 ransom in cryptocurrency, the account was targeted again shortly after. The delay in manual review by Meta and the perceived unhelpfulness of initial support channels often push victims towards paying the ransom to regain access to their accounts and avoid further financial or professional damage.
Meta has acknowledged the issue and stated that it is implementing unspecified protections after reviewing affected accounts. The company claims to fight deceptive behavior and has restored some content and accounts identified by journalists. However, a comprehensive fix to the "suspend first, verify later" approach has not yet been announced. This situation is also drawing legal scrutiny, with courts in India examining the legality of social media platforms suspending accounts based on copyright claims.
Law enforcement agencies advise victims not to pay the ransom, as it not only fails to guarantee the scammer's compliance but also encourages further attacks. This scam differs from previous ones that used fake copyright warnings as phishing lures to steal login credentials. Instead, these scammers are directly abusing the platform's genuine complaint mechanism to achieve account suspension.
To protect themselves, users are advised to enable two-factor authentication, though this primarily guards against credential theft and not direct complaint abuse. It is crucial to verify copyright complaints through official Instagram channels and avoid clicking on suspicious links or providing information via third-party messaging apps. Users should utilize Instagram's official appeal process and meticulously document all communications, including ransom demands and payment requests, as evidence.
The potential for AI to automate the creation and submission of fraudulent complaints at scale further exacerbates this problem. If even a small percentage of victims pay the ransom, the scheme can prove profitable for scammers, especially given the time it takes for platforms to manually resolve such disputes. This highlights a broader challenge for social media platforms in balancing automated efficiency with robust security and user protection.