The Copyright Violation Scam: A Warning That Steals Accounts

Also filed under: copyright violation phishing · fake copyright strike scam · account suspension phishing · Instagram copyright scam

That message warning your account violated copyright and will be deleted in 24 hours unless you appeal is a phishing scam, and the 'appeal' link is the entire crime. There is no violation, no review team waiting, and no deadline. There is only a fake login page with your name on the guest list.

The copyright angle is chosen with care. It sounds official, it sounds plausible (who among us is certain about every song in every story), and it threatens the thing you'd act fastest to save. Fear does the clicking. The scammer just holds the door.

How the con runs

The bait arrives as a DM, email, or text dressed up as the platform: Instagram, Facebook, TikTok, YouTube, the logo is a copy-paste away. It cites a 'Copyright Infringement Detected' case number, threatens permanent deletion, and offers one exit: an appeal form, linked right there, ticking clock included. The sender is something like 'copyright-help-center' with a suspicious surplus of hyphens.

The link opens a login page that is a pixel-faithful clone of the real one. You enter your username and password to 'verify your identity' for the appeal. Some versions politely ask for the two-factor code too, and relay it to the real site in real time, which defeats the code you assumed made you unkidnappable.

The swap happens in minutes. He logs in, changes the email, then the password, then the recovery phone, in that order, so every reset lever now pulls toward him. Your session gets kicked, and the account that took you six years to build is now inventory, either held for ransom, used to phish your followers (a message from you converts beautifully), or sold outright on handle marketplaces.

Accounts with money attached, creator funds, shops, ad accounts, get the deluxe treatment: the scammer runs ad spend on your card or pivots your audience into a crypto scheme before you've finished finding the real support form.

Play defense

• Never log in through a link sent to you. If a warning worries you, close it, open the app or type the site address yourself, and check your official notifications. Real strikes appear there.
• Look at the sender, not the letterhead. Official notices come from the platform's own domains and in-app channels, not from 'appeal-center-support' accounts.
• Turn on two-factor authentication, and prefer an authenticator app or passkey over SMS. Then remember that a phishing page can relay codes, so the no-link rule still applies.
• Turn on login alerts so you hear about new sessions the minute they happen, which is the minute that matters.
• Slow down on anything with a countdown. Copyright disputes take weeks in the real world. A 24-hour ultimatum is a costume.
• Tell your team the same rules. Shared brand accounts get phished through whichever admin is having the busiest day.

Already got hit?

1. If you entered credentials but still have access: change your password immediately, enable two-factor authentication, and log out all other sessions from your security settings.
2. If you're locked out: use the platform's hacked-account recovery flow, instagram.com/hacked for Instagram, facebook.com/hacked for Facebook, or the equivalent support path on TikTok or YouTube. Start immediately; recovery gets harder as he digs in.
3. Change that password everywhere you reused it, which is the confession portion of the recovery process. A password manager prevents the sequel.
4. Warn your followers from any channel you still control. Your hijacked account is now phishing the people who trust you, and speed limits the damage.
5. If payment methods, shops, or ad accounts were attached, alert your bank or card issuer and check for unauthorized spend. Then report the phish at reportfraud.ftc.gov and ic3.gov.

Questions people ask at 2 a.m.

All case files →