You clicked the link. Or maybe you typed your password into a page that looked close enough. It happens faster than most people expect. The first few minutes matter more than anything else, so don’t waste time wondering how it happened.
Lock Things Down Before Anything Else
Change your Instagram password right away. If you reused that same password somewhere else, change it there too. I know people hate hearing that, but reusing passwords is one of those habits that feels harmless until it really isn’t.
Then check your login activity. If you spot a device you don’t recognize, sign it out. Turn on two-factor authentication before you get distracted by messages or notifications. It feels like an extra step now. Later, you barely notice it.
Don’t Ignore Your Email
Look through your email for security alerts from Instagram. Sometimes scammers change your email address first because they know that’s how people lose control of an account. If you see something you didn’t do, act on it immediately instead of assuming you’ll deal with it tonight.
If They Already Took Your Account
Instagram has an account recovery process, and it’s worth following even if it seems slow. Stick with the official recovery steps. Fake recovery services are everywhere, and I have a pretty firm opinion about them. Most are just another scam wearing a different jacket.
• A password reset is the obvious first move, unless the email has already been changed.
• Your friends matter here because they can tell you if strange messages are still going out from your account.
• Screenshots, even the boring ones, make it easier to explain what happened if support asks later.
• Recovery can take time, and refreshing the page every minute only makes the wait feel longer.
Make It Harder Next Time
Because scammers usually want speed, slowing them down works surprisingly well. Use a password manager if you don’t already. Turn on login alerts. Pause for a second before tapping links that show up in direct messages, even if they look like they came from someone you know.