I got a weird message from someone I don’t know on Instagram this morning, saying they needed help getting back into their account. They sent me a link that said “Tap here to reset your password” and wanted me to forward it to them. Normally I wouldn’t bother with answering back, but I was at the gym and peddling away on the recumbent bike, so I thought it might be entertaining to see how long I could string the scammer along and see if they got frustrated. Once I started, I felt a little invested in seeing how long I could stretch it out! We kept this going for six hours over the course of the day, and it all started with this message:
So then I got a suspicious reset link:
I am still not entirely sure how they are sending the link to my phone, but you can be sure I’m not clicking on that thing. A quick Google search came up with dozens of reports of a phishing scam that starts with a text that says “Tap to reset your Instagram password” along with a link that starts with https://ig.me…and followed by a bunch of letters. The Instagram person wants me to forward them the link so they can verify their account. That just seemed really weird, so of course I had no intention of actually doing it.
I scribbled out a bit on the link so nobody actually tried it or sends it to someone. Out of curiosity, I went to Instagram and tried to log in under his username and pretend I forgot my password to see if it said he’d get a reset text. What it said was the account was locked due to suspicious activity and they’d send a reset link to the e-mail. That’s because Instagram doesn’t send reset texts! They send an e-mail to the address associated with the account.
So that confirmed the Instagram account was most likely hacked, however it still didn’t explain how he was sending me the reset link. By now we had gone back and forth a bit and he was getting desperate. And somehow we have now become best friends! I decided to just keep us going in circles for a bit.
Here’s Your Link, Send Me a Selfie
So we went back and forth for a while. I think he sent me the link 5 or 6 times all together. So at one point, I decided to send him a link I had found online just to see what would happen. Surprise! It didn’t work and he didn’t seem too happy about it. But unfortunately, I am the only one he can trust right now. Even though I have never interacted with this person before and he apparently have over 2,000 other “friends” he can contact on Instagram.
Then I thought maybe I should challenge him to prove himself! I asked him to send a selfie. It took him a minute, but he sent me one back. A quick scroll through the person’s IG account showed the same selfie pic he supposedly just took was actually from over a year ago. One of the only non-cosplay pics on the guy’s account, so it took Mr. Scammer a while to find it. I put the black bar over the person’s face since it is his photo and I’m pretty sure he’s not the one who actually sent it. (the lower half is a mask)
Let’s see how long we can keep this going!
We went back and forth several more times, with me being extra helpful and offering to click on his link for him, contact Instagram and ask them for help on his behalf, and have him send me the link a few more times just for shits and giggles. By now I am really surprised he’s still chatting with me. He’s really got perseverance, and I’m wondering if I should just tell him I’m never going to send him the link. But then, I wouldn’t want to just drop my best friend like that, so I kept it going a bit longer. He sent me the link 12 times total before giving up!
This guy really really wanted me to send him that link! It’s too bad I never figured out how to make it work….lol. These texts are just a small sampling of our conversation over the course of the day, where I pretended to get increasingly confused about how links work, how to cut and paste and how to follow basic instructions.
While I was doing all this, I did take the time to report his account to Instagram to alert them it had been hacked. And somewhere along the way, I decided to start screenshotting because it was just too good not to share. And also, hopefully somebody will see this and not get scammed. I’m still not sure exactly what this scam accomplishes, but my guess is maybe that is a real reset link meant just for me and they will use it to reset my password. Or maybe it’s a special link and it will verify my phone number…I have no idea but best to play it safe. And in the end, after a full day of texting, he did finally give up.
I’d be interested to hear if anyone else has had someone request them to forward them a password reset link for Instagram. And I am really curious how he was sending those links to my phone! I’ve learned to just never click a link I’m not sure about, and not to trust people I don’t know online. I did that once and got my Facebook page stolen! That experience was terrible, and that scam is still going on! Pretty much not a day goes by without someone contacting me to advertise on my Facebook page and pay me big money. Don’t fall for that one! That’s scam too unfortunately.
~~~~~~~~~~ * ~~~~~~~~~~~
About the Author
Candy Keane is a digital content creator and long-time cosplayer, most well-known for being on the cover of the Star Wars documentary Jedi Junkies. After making costumes professionally for over a decade, she now writes about about geek culture and mom life, and continues to cosplay for fun, while sharing her love of costumes on Instagram @SewGeekMama. Her first children’s book, I’m Going to My First Comic Convention, was published in 2020 and won a Story Monsters Approved award for Excellence in Literature.