For many businesses, creators and public figures, Instagram is no longer just a social media account.

It can be a shopfront, a portfolio, a marketing platform, a source of enquiries, a route to sponsorships and, in some cases, a significant source of income.

That makes it valuable.

And anything valuable can become a target.

Recent reports have highlighted a growing problem involving social media account hijacking, fake copyright complaints and extortion attempts aimed at creators and businesses.

The consequences can be serious. An account may be locked, suspended or removed. Content built up over years can disappear overnight. Sponsored campaigns can be disrupted. Revenue can stop. Brand relationships can be damaged.

For some victims, the account itself is effectively being held to ransom.

How are accounts being targeted?

There are several common methods.

Criminals may attempt to gain access through:

• phishing emails or fake login pages
• compromised passwords
• SIM swapping
• session hijacking
• fraudulent account recovery attempts
• malicious links sent by direct message
• fake brand or sponsorship approaches

Once access is gained, attackers may change passwords, remove recovery details and take complete control of the account.

They may then demand payment for its return.

The growing problem of fake copyright complaints

Account takeover is not the only risk.

A particularly concerning tactic involves abusing copyright reporting systems.

Fraudsters can submit false copyright complaints against genuine content. Because social platforms often rely heavily on automated moderation systems, repeated complaints can result in content being removed or accounts being restricted.

The attacker may then contact the account holder and demand money to withdraw the complaints.

For a creator or business whose income depends on their account, that can create enormous pressure to pay.

But paying does not necessarily solve the problem.

Once a criminal knows someone is prepared to pay, there is a real risk that further demands will follow.

Is this simply a social media problem?

No.

Depending on the circumstances, this can involve a number of serious legal issues.

False representations made for financial gain may potentially amount to fraud.

Threats or demands for payment may potentially amount to blackmail or other criminal conduct.

Unauthorised access to accounts can raise issues under computer misuse legislation.

False copyright claims may also give rise to civil remedies.

Where an attacker causes financial loss, reputational damage or disruption to a business, there may also be wider commercial consequences.

Can anonymous attackers be identified?

In some cases, yes.

Online anonymity is not always as secure as offenders assume. Depending on the circumstances, legal processes may be available to seek disclosure of information capable of identifying the person responsible.

That could include information held by social media platforms, service providers, hosting companies or other third parties.

In more serious cases, legal remedies may include applications designed to obtain information from those who hold data about the person behind the attack.

The exact route will depend on the facts, the type of wrongdoing involved, the evidence available and where the suspected offender is based.

What should you do if your account is compromised?

If your account is hacked, suspended or targeted by false reports, acting quickly is important.

Start by preserving evidence.

Take screenshots of:

• suspicious messages
• login alerts
• payment demands
• copyright complaints
• emails from the platform
• changes to account details
• usernames, email addresses and phone numbers used by the attacker

Keep a clear timeline of what happened and when.

Do not delete messages simply because they are upsetting or threatening. They may later become important evidence.

You should also use the platform’s official account recovery and reporting procedures and secure any connected email addresses, devices and other social media accounts.

If money is being demanded, or threats are being made, consider reporting the matter to the police and Action Fraud.

Should you pay someone demanding money to return your account?

That is a difficult decision, particularly where an account is commercially valuable and the loss is causing immediate financial damage.

However, paying an attacker carries obvious risks.

There is no guarantee the account will be returned.

There is no guarantee the attacker will stop.

And payment may encourage further demands.

Anyone facing an extortion demand should consider obtaining legal advice before engaging further, particularly where the account has substantial commercial value or where the demands are escalating.

What can businesses and creators do to protect themselves?

Prevention matters.

For anyone who relies on social media as part of their business, account security should be treated as part of normal commercial risk management.

Useful steps include:

• using strong, unique passwords
• enabling two factor authentication
• keeping recovery email addresses secure
• limiting the number of people with admin access
• regularly reviewing connected devices and sessions
• avoiding links sent through unsolicited direct messages
• verifying sponsorship and brand approaches independently
• keeping copies of important content and commercial records
• documenting account ownership and access arrangements

If a social media account generates revenue, enquiries or brand value, it should be treated like any other important business asset.

What if false copyright complaints are being used against you?

False copyright reporting can be especially damaging because it can trigger automated restrictions before anyone properly examines the dispute.

If you believe copyright complaints are malicious or fabricated, keep copies of every report and any communication linking the complaint to a demand for money.

It may also be important to establish clearly that you own, licensed or were otherwise entitled to use the material in question.

Where false claims are causing commercial damage, legal advice may help determine whether there are grounds to challenge the conduct, pursue the individual responsible or seek urgent remedies.

Why this matters more now

Social media accounts have become commercially valuable assets.

For influencers, equestrian businesses, law firms, retailers, hospitality businesses and professional service providers, an Instagram account can represent years of audience building, customer trust and marketing investment.

Losing access can mean more than losing followers.

It can mean:

• cancelled campaigns
• lost sales
• missed enquiries
• damaged reputation
• loss of sponsorship income
• disruption to customer relationships
• long term brand damage

That is why social media account attacks should not be dismissed as an IT inconvenience.

They can be a serious legal and commercial problem.

The legal landscape is catching up with the digital world

Online crime evolves quickly.

Traditional legal principles around fraud, extortion, intellectual property, computer misuse, disclosure and commercial loss are increasingly being applied to conduct taking place through social media platforms.

For businesses and individuals targeted online, the most important thing is to recognise when a problem has moved beyond ordinary platform support and into a situation where legal advice may be needed.

Need advice after a social media account attack?

If your business or personal brand has been targeted by hacking, false copyright complaints, extortion or other online misconduct, KMC Legal & Finance can advise on the legal options available.

We can help you understand the wider issues surrounding:

• fraud
• blackmail and extortion
• commercial disputes
• intellectual property
• reputational damage
• evidence preservation
• identifying anonymous wrongdoers
• civil remedies

KMC Legal & Finance
DEFENCE – MANAGEMENT – ADVOCACY

📞 0800 9494 667
🌐 kmc-legal.co.uk

Always in Your Corner