Instagram users locked out after Meta AI abused to steal accounts
Bill Toulas
- June 2, 2026
- 11:47 AM
- 1
Multiple Instagram users had their accounts hijacked after attackers convinced Meta’s AI-powered support tools that they were the legitimate owners.
In many cases, impacted users are unable to recover access due to the platform's use of automated assistance that involves only AI/chatbot loops and no human support agents.
On Monday, multiple holders of rare and high-value accounts reported suddenly losing access to their accounts, claiming that their identities had been verified via facial scans and that they had enabled safeguards such as two-factor authentication (2FA).
Among the impacted accounts were one previously used by the Obama White House team, one belonging to app researcher Jane Manchun Wong, @hey, and @korn.
The owner of the @korn account, who noted that the band never officially claimed the account and is using another one, expressed frustration with Meta’s recovery mechanism, which had put them in a time-wasting loop.
“I spent 6 hours trying to get human support, and Meta's support AI gave me 4 broken links in a row,” explained the user identifying as Kornel.
“We're at the point where one AI stole it, and another can't fix it, zero humans in the loop anywhere,” the @korn account owner said.
According to some reporters, the account-hijacking attacks were trivial. The activity involved chatting with Meta’s AI assistant, convincing it that the attacker was the legitimate account owner, and tricking it into changing the associated email address.
The takeover process starts with the threat actor activating the "forgot password" protocol due to the account being hacked. When Instagram's AI-powered assistance asks the user to verify with a selfie, the attacker uses a photo from the target's account, passes it through an AI video generator to turn it into an animation, and uploads it to Meta for verification.
User André says that "Meta’s AI just accepts it because it can’t tell the difference between a real selfie and an AI-generated video of someone’s face." They also added that the takeover method bypasses 2FA protections.
"Then you try to recover your account, and you’re talking to a chatbot that has zero ability to help. You can’t escalate to a human. You’re just stuck. Your asset is gone, and there’s no one to call," André said.
Some reports claim that attackers used VPN services to appear as if they connected from the target’s usual region, to pass geolocation checks that would trigger a more complex login flow for added security.
After changing the email address, the attacker could initiate a password reset process and receive the required security code for gaining access to the account.
Some online reports claim that the @e and @f one-letter accounts on Instagram were obtained through an active exploit. However, others dispute this information, arguing that the usernames were secured by an individual with internal privileges. BleepingComputer was not able to independently verify either claim.
Because single-letter social media accounts are very rare, they have a high value on the black market, typically in the tens of thousands of U.S. dollars.
While Meta has yet to publish a press release with an official response to the situation, the company's vice president of communications, Andy Stone, replied on social media to an affected user stating that the "issue has been resolved, and we are securing impacted accounts."
BleepingComputer has contacted Meta with a request for a comment, but we have not heard back as of publishing.
Test every layer before attackers do
Security teams log 54% of successful attacks and alert on just 14%. The rest move through your environment unseen.
The Picus whitepaper shows how breach and attack simulation tests your SIEM and EDR rules so threats stop slipping by detection.
Related Articles:
Over 20,000 Instagram accounts stolen in Meta AI support hack
Agentic AI Has an Identity Problem and Attackers Know It
Webinar: Why business email compromise attacks keep succeeding
Understand AI security with this 6-course bundle for $20 through 6/28
Clean GitHub repo tricks AI coding agents into running malware
- Account Lockout
- Account Takeover
- Artificial Intelligence
- Meta
- Support
Bill Toulas
- Previous Article
- Next Article
Comments
- Dantevortex - 3 weeks ago If meta was a good company they would roll back any and all "e-mail change" actions for any account of the past month, and restore the old account. But we all know they won't because they really don't care.
Post a Comment Community Rules
You need to login in order to post a comment
Not a member yet? Register Now