Have you received a message from a friend or family member asking you to vote for a so-called tattoo contest like the one shown in the example on Instagram? Please note: this is not a real contest, but a phishing attempt that could lead to your account being taken over.

What exactly happens?
If you click on the link, you will be taken to a fake website where you will be asked to log in with your Instagram details. Be careful, because this is what will happen:
- your username and password will be stolen
- your Instagram account will be taken over by the hacker
How can a hacker or scammer misuse your account?
Your account is trusted within your network. This is very valuable to cybercriminals, as it increases the likelihood that your friends and family will respond to the fake messages. Cybercriminals can use your hacked account to:
Scam your network with new phishing messages.
Lure them into crypto scams or fake investments.
Misuse your payment methods, for example to pay for phishing advertisements on social media via your linked payment card.
What can you do?
- Use two-step verification (2FA). It is a simple solution to better protect your accounts. Two-step verification allows you to keep unwanted people out. Protect your account via Settings > Security > Two-factor authentication.
- Take back control of your account. Immediately change your password if you have logged in via such a suspicious link. If you use the same password in different places, you must change it everywhere. You must also add 2FA immediately, otherwise the hacker can change your password again
- Did you receive such a message? Report it to Instagram and warn the sender by phone or another channel, such as text message, as their Instagram account may have been hacked.