Fake "Copyright Violation", "Meta Verified" and "Account Will Be Disabled" Messages on Instagram and Facebook

Short answer: a DM, comment or email saying your Instagram or Facebook account or Page will be disabled in 24 or 48 hours for copyright, or offering a "Meta Verified" badge if you click a link, is almost always phishing. Instagram says it will never contact you about your account's security through Direct Messages. Check for real notices only inside the app: Account Status, your Support Inbox, and Recent emails in Accounts Center.

What do these fake messages look like?

They come in a few versions, and they change wording often:

• Copyright violation. "Your account has been reported for copyright infringement. If you think this is a mistake, appeal within 24 hours or your account will be permanently deleted." There is an "Appeal now" button or link.
• Meta Verified or blue badge. "Congratulations, your account is eligible for the blue badge. Fill this form to complete verification." Or a profile called "Meta Verified Support" claiming you broke a rule.
• Account disabled or Page restricted. "Your Page has been scheduled for removal due to community standards violations." Aimed especially at business Pages and Instagram vendors.
• "Unusual login" emails. A fake security alert with a "This wasn't me" button that leads to a fake login page.

They arrive by Instagram DM, Messenger, comments that tag you, and email. Many come from accounts named "Meta Support", "Page Support" or "Instagram Copyright Team", often with the Meta or Instagram logo as their profile photo.

How the phishing works

1. Fear and a deadline. Losing a business account that took five years to build is terrifying. The short deadline stops you from thinking.
2. A link that looks official. Researchers at Trustwave SpiderLabs described a campaign where the email link pointed to a real Facebook post, which helped it get past email filters. That post then linked out to a lookalike "copyright appeal" site.
3. A form that collects everything. Full name, email, phone number, username, then your password.
4. A fake code step. The page asks for your two-factor code or says "wrong code, try again". Whatever you type, the criminals use it to log in as you right away.
5. Takeover. Within minutes your email and phone are changed and the account is used to scam your followers.

Some Meta Verified versions also ask for card details or a "verification fee".

How to check if a message is really from Meta

1. Check Account Status

If Instagram has really removed content or restricted your account, it shows in the app. Go to your profile, tap the menu, and look for Account Status (on many versions it is under "More info and support"). It lists removed content, features you cannot use, and lets you appeal. If Account Status is clean, the DM is fake.

On Facebook, real warnings appear as notifications in the app and in your Support Inbox. Open these yourself. Do not follow the link in the message.

2. Check Recent emails

Instagram keeps a record of the emails it sent you in the last 14 days. On the phone: profile, menu, Accounts Center (now being renamed Meta Account), Password and security (some versions say Login and security), then Recent emails. Security emails appear under "Security", others under "Other". If the email you got is not in this list, it did not come from Instagram.

3. Check the sender address

Instagram's Help Centre lists the addresses it uses for security messages: @mail.instagram.com, @support.instagram.com, @support.facebook.com, @facebookmail.com and @global.metamail.com. Treat this as a clue, not proof, because sender names can be faked. "Meta-support-team@gmail.com" or "copyright-appeal-meta.com" are not Meta.

4. Remember the DM rule

Instagram says it will never contact you about your profile's security through Direct Messages. Any DM about copyright, verification or disabling your account is fake, however official it looks.

How the real Meta Verified works

Meta Verified is a real paid subscription, but you start it yourself. You subscribe from inside the app through Accounts Center, choose the profiles to verify, set up payment through the app, and confirm your identity with a government ID. It is only offered in some countries, to people aged 18 and over. Meta does not DM you to say you have been "selected" for a badge, and it does not send you to a Google Form or a website you have never heard of.

Red flags at a glance

How to report the fake message

• Instagram DM: open the chat, tap the name at the top, then Report. Then block.
• Facebook or Messenger: open the profile or chat and report it as a scam or as pretending to be someone.
• Email: do not click anything. Instagram's Help Centre says you can report strange emails to phish@instagram.com, then delete the email.
• Warn others. Vendor groups and creator WhatsApp groups are often hit by the same wave on the same day.

The Bank of Ghana's October 2026 fraud advisory said impersonation accounts on social media should be avoided and reported, and that no legitimate institution will ask for your PIN, password or OTP through social media.

What to do if you already clicked and entered your details

1. Change your Instagram or Facebook password immediately from the real app, then change your email password.
2. Turn on two-factor authentication, preferably with an authenticator app, and log out of devices you do not recognise.
3. If you are already locked out, use instagram.com/hacked or facebook.com/hacked. Our guide on recovering a hacked Instagram account walks through each step.
4. If you entered card details, call your bank and block the card.
5. Report to the Cyber Security Authority: call or text 292, or email report@csa.gov.gh.

If the scammers then used your account to sell to your followers, report it on TrustCheck, and anyone can check a number, handle or website before paying. Instagram sellers can also see how buyers check them on our Instagram vendors page.