The message usually looks harmless. A login code appears on your phone, then someone says they sent it by mistake and asks you to share it. That tiny moment is where things go wrong. Once a scammer gets your OTP, they may try to enter your account before you even realize what happened.
Start by Taking Back Control
Open Instagram and try logging in yourself. Do not use links from messages that suddenly appear. Go through the app or the official website instead. If you still have access, change your password right away.
The Recovery Steps That Actually Matter
• Your password comes first because a fresh one cuts off the easiest route back in, especially if you picked something you have used somewhere else.
• Two-factor authentication is worth turning on after you recover things. It feels slightly annoying at first, but after a while it just gets out of your way.
• The account recovery page inside Instagram is the place to use if you are locked out, and the process can feel slow when you want instant answers.
• Watch your email closely. A message about a changed account detail might give you a chance to reverse the change before the scammer settles in.
After You Get Back In
Check recent activity and remove anything you do not recognize. You do not need to obsess over every tiny detail. Just make sure the account looks like yours again.
Because scams often leave people embarrassed, they delay telling friends. Do not do that. A quick message saying your account was compromised can stop someone else from trusting a fake request sent from your profile.
Keep the Scam From Returning
The trick is simple. Never share an OTP, even if the person sounds polite or claims to be helping. Scammers are good at creating pressure because pressure makes people stop thinking clearly.