I woke up this morning to three DMs. One was from a “jewelry brand” looking for an ambassador (I have 400 followers, so nice try). One was a threat saying I violated copyright laws. And one was just a weird link from a bot named @User99283.
It’s getting ridiculous, isn’t it?
Instagram in 2026 feels less like a photo app and more like a minefield. If you aren’t dodging “Crypto Bros,” you are dodging fake job offers.
Most people just delete these messages and move on. Don’t do that. Deleting them is like killing a mosquito; five more will just come back. You need to close the window.
Here is how to actually lock down your account so these bots hit a brick wall.
1. The “Hidden Words” Shield (Do This First)
This is the single best feature Instagram ever added, and for some reason, they hid it deep in the settings menu.
It lets you create a “Blacklist” of words. If a DM contains any of these words, it goes straight to the trash. You never even see the notification.
How to set it up:
-
Go to Settings and privacy.
-
Tap Hidden Words.
-
Scroll down to “Manage custom words and phrases”.
-
Add these words immediately:
-
Ambassador
-
Collab
-
Forex
-
Crypto
-
Copyright
-
Violation
-
Boom. You just filtered out 90% of the garbage. (I also added “NFT” to my list because, honestly, I just can’t deal with it anymore.)
2. The “Copyright” Scam (Don’t Panic)
This is the one that gets smart people. You get a DM that looks exactly like an official warning from Meta. “Your account has violated copyright laws. Click this link to appeal or you will be banned in 24 hours.”
It looks scary. The logo is right. The language is formal. It is a lie.
Here is the rule: Instagram will NEVER DM you about bans. If they want to ban you, they send an email or a system notification in your “Account Status” menu. They do not slide into your DMs like a creepy ex.
If you click that link, you aren’t “appealing” anything. You are handing them your password on a silver platter.
3. The “Message Request” Nuke
If the bots are still getting through, it’s time to go nuclear. You can change your settings so that only people you follow can message you.
-
Go to Settings and privacy.
-
Tap Messages and story replies.
-
Tap Message controls.
-
Change “Your followers on Instagram” to Requests.
-
Change “Others on Instagram” to Don’t receive requests.
What this does: If a random stranger (or bot) tries to text you, the message just… vanishes. It doesn’t even hit your “Requests” folder. Peace and quiet. Finally.
4. The “2FA” Mistake
Okay, one last thing. If you do accidentally click a bad link (we’re all human, it happens), you need a safety net.
Turn on Two-Factor Authentication (2FA). But do NOT use SMS (Text Message). Hackers can swap your SIM card. It’s easier than you think.
Use an Authenticator App (like Google Authenticator or Duo). It generates a code on your phone that changes every 30 seconds. Even if a hacker has your password and your phone number, they still can’t get in without that swirling code.
The Bottom Line: Your DMs are your house. Stop leaving the front door open for random people to walk in and try to sell you fake sunglasses. Lock it up.
