A new and clever scam has emerged and this one could hit you twice. Not only are the scammers behind this one trying to steal your Instagram password, they also are phishing for your email log-in.
Luckily, BBB has some tips to help you spot the scam and protect your passwords:
How the scam works
In this scam, you receive an official-seeming email that is allegedly from Instagram. According to the message, you have violated copyright laws, and your account will be deleted within 24 hours. But the message says not to worry - if you think that Instagram has made a mistake, all you need to do is click the button and "verify" your account. From there you are taken to a website that prompts you to input your Instagram credentials. Most scams would end there, but not this one.
Immediately, another message appears. This pop-up claims that you must also verify your email address and even offers a list of e-mail providers. Choose yours, and you'll be urged to enter your email address and password. As a final touch, the scam site redirects to the real Instagram website, a trick that "lends additional credibility to the scam," explains the Kaspersky website.
How to spot these scams
Double check the "from" email address and link destinations on questionable emails. Hover over any links in an email you receive to see where the link really leads. Suspicious links are one of the main giveaways of email scams. Also, make sure the "from" address is actually from the business it claims to be.
Understand how businesses handle communications. If you know how a company handles disputes and suspicious activity with your account, it will be easier to spot a scam. Will they email you? Call? Send a text message?
Look into the claims. Don't act without first verifying the claims. Log into your account or look up the company's official phone number (check your bill or welcome email) and call them to confirm that there really is a case of suspicious activity associated with your account before you decide what to do.
Don't panic and don't feel intimidated. Scammers want you to panic. They may use intimidation tactics, such as claiming your account will be shut down in 24 hours in order to pressure you into giving up your personal information or making payments. Legitimate businesses will not intimidate you in this way. Stay calm and think things through before you act.
We encourage you to visit BBB.org and read more tips for spotting scams on email and social media. You can also read more about how to protect yourself from phishing scams.
If you've been the victim of this or a similar scam, please report it to BBB Scam Tracker at bbb.org/scamtracker. Your report can help educate other consumers by raising awareness of scammers' tactics. You can reach your BBB at 423-266-6144.
Michele Mason is president of the Better Business Bureau serving Southeast Tennessee and Northwest Georgia.