Independent Reviews
Abstract identity silhouette protected from a hostile digital signal
Consumer Scams Published 8 Sept 2026 5 min read1 source

Fake Copyright Claims Trigger Instagram Ransom Demands

Creators told the BBC that bogus copyright complaints are being used to suspend Instagram accounts before the claimants demand money to withdraw them. The scam exploits platform enforcement rather than stealing a password first.

By VPN Rocks Editorial Team

The short version

What you need to know

  • Creators told the BBC that people filing bogus Instagram copyright complaints then directed them to Telegram and demanded money to withdraw the claims.
  • Repeated complaints can put an account at risk even when the claimant has not proved ownership. Meta told the BBC it restored affected content and added protections to the accounts it reviewed.
  • Preserve the complaint and ransom messages, use Instagram's official appeal route and do not negotiate through a link or chat supplied by the claimant. A VPN cannot stop abuse of a platform's reporting system.

How the fake copyright-claim scam works

Instagram creators told the BBC that bogus copyright complaints are being filed against their posts and followed by demands for money. The complainant can direct the creator to Telegram or another private channel, then offer to withdraw the strike in return for cryptocurrency or another payment.

The pressure comes from Instagram's enforcement process. Repeated claims can lead to content removal, temporary suspension or loss of monetisation before the underlying ownership dispute is resolved. One creator with 1.5 million followers said he paid $50 after an earlier appeal had taken weeks and cost him income; the BBC also saw a message demanding $900 to withdraw a strike. Those are reported examples, not a standard ransom amount.

What Meta said about the affected accounts

Meta told the BBC that its systems are designed to protect people from this abuse and that, after reviewing the examples supplied by the broadcaster, it restored affected content and added further account protections. The company said it acts against deceptive behaviour used to scam people and businesses.

Instagram says only a copyright owner or an authorised representative should report infringement. That rule does not itself prove an incoming claim is genuine, and a familiar-looking email address or a confident legal threat is not evidence that the sender owns the work. The BBC's reporting shows why a slow or opaque appeal can become leverage for an extorter.

What creators should do now

Keep copies of the copyright notice, claimant details, post URL, original files, licence or permission records and every ransom message. Open Instagram directly rather than using a link supplied in an email or private chat, and submit the dispute through the platform's official copyright and account-support process. If the work came from another person or agency, verify the rights through a separately found contact route.

Do not send a password, login code, recovery code or payment because someone promises to restore the account. Law-enforcement organisations cited by the BBC advise extortion victims not to pay because payment supports the criminal system and does not guarantee the demands will stop. Secure the email account tied to Instagram, use a unique password and strong multi-factor authentication, review active sessions, and report credible threats or losses to the relevant platform and national fraud-reporting service.

Where a VPN helps — and where it does not

A reputable full-tunnel VPN can encrypt supported traffic between a device and the VPN provider on an untrusted network, and it can replace the public IP address normally visible to websites. That is useful network privacy, especially when a creator is travelling or working on public Wi-Fi.

A VPN cannot validate copyright ownership, stop somebody filing a platform complaint, accelerate an appeal or prevent Instagram enforcing its own rules. It also cannot make a Telegram ransom demand trustworthy. Evidence preservation, official appeals, account security and independent verification address the actual scam.

VPN Rocks view

This scheme does not need to steal a creator's password before causing harm. It weaponises the gap between a fast complaint and a slower review, making business disruption itself the threat.

Creators should prepare before a strike arrives: retain source and licensing records, protect the account's recovery email, know the official appeal path and keep brand contacts outside one social platform. Paying an unverified claimant may restore one post, but it does not fix the reporting weakness or prevent another demand.

Primary reading

Sources and further reading

We add plain-English context and practical advice. These links let you inspect the underlying reporting, research and official guidance directly.

Useful next steps