The BBB says victims get a notification that appears to be from Instagram saying they've been tagged by someone. There's a link in the notification to see the post.
The link takes you to a page that appears to be the Instagram log in, but it's not.
It's a phony form to get your username and password. Once scammers have your account information, they will hack your Instagram and tag your followers in new "Ugly List" posts, perpetuating the con and stealing more information.
Here are BBB's tips to avoid the scam:
- Do a quick search. Be wary of anything that is shocking or sensational on social media. If it seems suspicious, do an online search. If it's a scam, chances are that other victims have posted complaints and information online.
- Don't trust your friends' tastes online. It might not actually be them "liking" or sharing these scam posts. Their account may have been hacked.
- Hover over a link to see its true destination. Before you click, mouse over the link to see where it will take you. Don't click on links leading to unfamiliar websites.
Report an Instagram scam. Check out Instagram's resources for reporting scams. If your account has been hacked, see Instagram's advice on securing your account and/or reporting the violation.
For more information on scams visit bbb.org and to report a scam, go to BBB Scam Tracker (bbb.org/scamtracker).