LEGALAUDIT

Scam Watch

Como reconocer Instagram 'fan support' / verification phish hijacking creator accounts?

TLDR

Attacker DMs creators posing as Meta Verified support: 'we detected suspicious activity, click link to verify or your account will be deleted'. Phish page asks login + 2FA TOTP code (relay attack). Often hits influencers, small businesses,...

Como funciona

Attacker DMs creators posing as Meta Verified support: 'we detected suspicious activity, click link to verify or your account will be deleted'. Phish page asks login + 2FA TOTP code (relay attack). Often hits influencers, small businesses,...

Señales de alerta

  • Presion urgente para hacer clic, pagar o compartir codigos de inmediato.
  • Enlace o remitente que no coincide con la organizacion oficial.
  • Solicitud de tarjeta, contrasena, OTP, firma de wallet o transferencia.

Qué hacer

  1. 1Attacker DMs creators posing as Meta Verified support: 'we detected suspicious activity, click link to verify or your account will be deleted'.
  2. 2Tells: 1) DM comes from non verified Meta lookalike (no blue check); 2) urgency + threat of deletion; 3) link is meta verify help.com etc (typo squat); 4) site asks 2FA code immediately after login (real Instagram doesn't on familiar device).
  3. 3DO: only manage account via the official Instagram app; report DMs as phishing; enable hardware key 2FA.

Fuente

Meta-Adversarial-Threat-Report

Fuente verificada por Mythos Forensic Team

https://about.fb.com/news/category/security/

FAQ

Es Instagram 'fan support' / verification phish hijacking creator accounts una estafa real?

Si. Trata el mensaje, la llamada o la solicitud de pago como sospechosos hasta que los verifiques por un canal oficial.

Cuales son las primeras senales?

Presion urgente para hacer clic, pagar o compartir codigos de inmediato.; Enlace o remitente que no coincide con la organizacion oficial.; Solicitud de tarjeta, contrasena, OTP, firma de wallet o transferencia.

Que debo hacer primero?

Attacker DMs creators posing as Meta Verified support: 'we detected suspicious activity, click link to verify or your account will be deleted'.; Tells: 1) DM comes from non verified Meta lookalike (no blue check); 2) urgency + threat of deletion; 3) link is meta verify help.com etc (typo squat); 4) site asks 2FA code immediately after login (real Instagram doesn't on familiar device).; DO: only manage account via the official Instagram app; report DMs as phishing; enable hardware key 2FA.

Puede LegalAudit revisar mi caso?

Si. Abre el chat gratis y pega el mensaje, el enlace, el remitente o los datos de pago para un triage.