Surge in Web-Based Instagram Account Takeovers Prompts Industry Response

Claims of Instagram accounts being 'hacked' without app installation have surged in 2026, driven by phishing campaigns and abuse of OAuth consent dialogs. Security researchers and law enforcement report a rise in web-based compromise attempts, often marketed as technical breakthroughs but primarily relying on scams and social engineering. This trend has led to temporary account lockouts, reputational damage, and financial extortion, prompting calls for improved detection, streamlined account recovery, and increased public education on phishing techniques.