Security News > 2022 > February > Instagram scammers as busy as ever: passwords and 2FA codes at risk
We monitor a range of email addresses related to Naked Security, so we receieve a regular supply of real-world spams and scams.
Right now our scam feed is awash with a variety of frauds targeting Instagram, Instagram, and Instagram.
Even though 2FA codes are typically only valid for a few minutes, cybercriminals no longer simply collect phishing data to use later.
If they can trick you into handing over a 2FA code as well as your password, they will try that password-and-2FA code combination immediately, knowing that, if they're quick enough, they're likely to get their attempt in before the 2FA code expires.
Learn in advance how to handle Instagram complaints or security warnings, so you know the procedure before you need to follow it.
The fraudulent sites above had HTTPS certificates and server names that included text such as "Lnstagram", but they clearly weren't hosted on the genuine Instagram site.