--- title: "Instagram Posting Things You Didn't? What to Do Now" description: "Posts, stories, comments or DMs you never sent, often crypto or \"investment\" scams? Instagram says your password may be compromised. How to lock it down." url: https://takebackmyinsta.com/blog/instagram-posting-without-you/ language: en updated: 2026-10-25 publisher: takebackmyinsta (https://takebackmyinsta.com/) --- # Instagram posting or messaging things you didn't? What it means and what to do Published 25 October 2026 5 min read [By the takebackmyinsta team](https://takebackmyinsta.com/about/) **In short:** If your Instagram is posting, commenting or messaging things you didn't, Instagram says your password may be compromised, and an app you once gave your login to is a common cause. If you can still log in: change your password (which logs out every device), remove suspicious third-party apps, turn on two-factor authentication, check the email and phone in your settings and remove linked accounts you don't recognize in Accounts Center. On a professional account where the hacker is still active, check Meta Business Suite for business managers you don't know. If you're already locked out, go straight to instagram.com/hacked. Then delete the scam posts and warn your followers. ## Signs someone else is using your account - **Posts, stories or reels you didn't publish.** Very often they promote "investments", crypto profits, giveaways or products at prices that are too good to be true. Instagram describes investment scams that promise to turn a small amount into a much larger one, for example $100 into $1,000. - **Comments or DMs you didn't write,** sent to your followers, often asking for money or containing a link. - **"Try again later" messages.** Instagram says you may see this error if inauthentic activity is detected on your account. More on it: [Instagram "Try again later"](https://takebackmyinsta.com/blog/instagram-try-again-later/). - **Logins you don't recognize.** You can check them in Accounts Center: [how to log out of Instagram on all devices](https://takebackmyinsta.com/blog/log-out-of-instagram-on-all-devices/). ## If you can still log in: five steps, in this order Instagram's Help Center lists these steps for an account that posts things you didn't. The order matters, because the first step cuts off every current session. 1. **Change your password,** or send yourself a password reset email. Pick a strong password you don't use anywhere else, with a mix of at least six numbers, letters and special characters. Instagram says every device logged into your account is logged out automatically when you change it. 2. **Revoke access for suspicious third-party apps.** Instagram warns that if you give an app your login, either your username and password or an access token, it can gain complete access to your account. Apps that offer likes or followers in exchange for your login are a typical example. 3. **Turn on [two-factor authentication](https://takebackmyinsta.com/glossary/#two-factor).** 4. **Check your phone number and email address** in your account settings and correct them if they've been changed. 5. **Open Accounts Center** and remove any linked accounts you don't recognize. ## Professional account and the hacker is still active If you have a creator or business account, you can log in, and someone is still taking actions on it, Instagram suggests checking who has business access: 1. On a computer, go to Meta Business Suite at business.facebook.com and log in with your Instagram details. 2. Click Business Settings on the left, then under Users, click People. 3. If you see business managers you didn't add, Instagram says you can remove them by switching your Instagram account back to a personal account. Afterwards you can switch back to a professional account. Know the cost first: as a personal account you lose access to Meta Business Suite, Ads Manager and in-app insights, including ads. Instagram says your insights data is kept for 90 days, so switching back to a professional account within that time brings it back. ## If you've already been locked out If the hacker changed your password, email or phone, the steps above won't work. Check your inbox for an email from **security@mail.instagram.com** saying your email was changed: Instagram says you can reverse the change from that message. Otherwise go to **instagram.com/hacked** in a computer or mobile browser and follow the recovery flow, which can end with an identity check such as a [video selfie](https://takebackmyinsta.com/blog/instagram-video-selfie-verification/). The full sequence is in [Instagram account hacked: how to get it back](https://takebackmyinsta.com/guides/instagram-account-hacked/). ## Clean up and warn your followers - **Delete what the hacker posted:** posts, stories, highlights, comments and any messages still sitting in your sent chats. - **Warn your followers** with a story or post once you're back in control, and through other channels if you're not. Tell them plainly not to send money, codes or personal details to anyone messaging from your account. - **Ask them to report scam posts.** "Scam, fraud or spam" is one of Instagram's report reasons, and anyone who got a scam message from your account can report it. - **Anyone who already paid** should contact their bank or payment provider and the police as soon as possible. > **Careful:** after a takeover, comments and DMs often fill up with accounts offering to "recover" your profile for a fee. Those are scams too. No genuine helper asks for your password or login codes: [how to spot a fake recovery service](https://takebackmyinsta.com/guides/instagram-recovery-scams/). ## Make sure it doesn't happen again - Use an authentication app for two-factor authentication and save your backup codes. - Never give your Instagram login to apps or websites that promise likes or followers. - Turn on login alerts and review the sessions where you're logged in. - Only trust security emails from @mail.instagram.com: [how to spot fake Instagram emails](https://takebackmyinsta.com/blog/fake-instagram-emails-and-messages/). The full list is in our [Instagram security checklist](https://takebackmyinsta.com/blog/instagram-account-security-checklist/). ## Frequently asked questions ### Why is my Instagram posting things I didn't post? Instagram says your password may be compromised. A common cause is a third-party app you gave your login to, which can then act with complete access to your account. ### Will changing my password stop the hacker? It logs out every device that's logged in, but it isn't enough on its own. Also revoke suspicious third-party apps, turn on two-factor authentication, check your email and phone, and remove unknown linked accounts in Accounts Center. ### My followers got scam messages from my account. What should I tell them? Tell them the messages weren't from you, not to send money or codes, and to report the messages. Anyone who already paid should contact their bank and the police. ### I can log in, but the hacker is still active on my professional account. What now? Check Business Settings in Meta Business Suite for business managers you don't know. Instagram says you can remove them by switching to a personal account and then back to a professional one. ## Hacker still active, or already locked out? Tell us what you can still access. We'll tell you for free which official route to take next. We never ask for your password or any code. [Start your free case check](https://takebackmyinsta.com/#start) [Free analysis on WhatsApp](https://wa.me/447308693453?text=Hi%2C%20I%20found%20you%20on%20takebackmyinsta.com%20and%20I'd%20like%20a%20free%20analysis%20of%20my%20Instagram%20account.) ## Key terms in this article - [Two-factor authentication (2FA)](https://takebackmyinsta.com/glossary/#two-factor) - [Accounts Center](https://takebackmyinsta.com/glossary/#accounts-center) - [Security email](https://takebackmyinsta.com/glossary/#security-email) - [Recovery scam](https://takebackmyinsta.com/glossary/#recovery-scam) ## Sources 1. [What to do if your Instagram profile posts unauthorized content (Instagram Help Center)](https://help.instagram.com/230786120405165/) help.instagram.com 2. [I have a professional Instagram account and I'm able to log in, but a hacker is still taking actions on my account (Instagram Help Center)](https://help.instagram.com/588993474002733/) help.instagram.com 3. [If you think your Instagram profile has been hacked (Instagram Help Center)](https://help.instagram.com/149494825257596) help.instagram.com 4. [Avoid getting scammed on Instagram (Instagram Help Center)](https://help.instagram.com/514187739359208/) help.instagram.com 5. [Report a post or profile on Instagram (Instagram Help Center)](https://help.instagram.com/192435014247952/) help.instagram.com 6. [Securing your Meta Account with two-factor authentication (Instagram Help Center)](https://help.instagram.com/566810106808145/) help.instagram.com ## Related guides - [Instagram account hacked: how to get it back](https://takebackmyinsta.com/guides/instagram-account-hacked/) - [Instagram recovery scams: how to spot a fake service](https://takebackmyinsta.com/guides/instagram-recovery-scams/) ## From the blog - [Instagram "suspicious login attempt": what it means and what to do](https://takebackmyinsta.com/blog/instagram-suspicious-login-attempt/) - [How to log out of Instagram on all devices and spot logins that aren't you](https://takebackmyinsta.com/blog/log-out-of-instagram-on-all-devices/) - [Instagram "Try again later": why your actions are blocked and what to do](https://takebackmyinsta.com/blog/instagram-try-again-later/) - [Fake Instagram emails and DMs: how to spot phishing before it costs you your account](https://takebackmyinsta.com/blog/fake-instagram-emails-and-messages/) --- Other languages: [de](https://takebackmyinsta.com/de/blog/instagram-postet-von-allein/) · [fr](https://takebackmyinsta.com/fr/blog/instagram-publie-tout-seul/) · [es](https://takebackmyinsta.com/es/blog/instagram-publica-solo/) · [it](https://takebackmyinsta.com/it/blog/instagram-pubblica-da-solo/) · [pt](https://takebackmyinsta.com/pt/blog/instagram-publica-sozinho/) · [nl](https://takebackmyinsta.com/nl/blog/instagram-plaatst-zelf-berichten/) · [pl](https://takebackmyinsta.com/pl/blog/instagram-publikuje-sam/) · [sv](https://takebackmyinsta.com/sv/blog/instagram-publicerar-av-sig-sjalv/) · [da](https://takebackmyinsta.com/da/blog/instagram-poster-af-sig-selv/) · [nb](https://takebackmyinsta.com/nb/blog/instagram-poster-av-seg-selv/) · [fi](https://takebackmyinsta.com/fi/blog/instagram-julkaisee-itsestaan/) · [cs](https://takebackmyinsta.com/cs/blog/instagram-pridava-prispevky-sam/) · [sk](https://takebackmyinsta.com/sk/blog/instagram-pridava-prispevky-sam/) · [hu](https://takebackmyinsta.com/hu/blog/instagram-magatol-posztol/) · [ro](https://takebackmyinsta.com/ro/blog/instagram-posteaza-singur/) · [bg](https://takebackmyinsta.com/bg/blog/instagram-publikuva-sam/) · [el](https://takebackmyinsta.com/el/blog/instagram-dimosieyei-xoris-esas/) · [hr](https://takebackmyinsta.com/hr/blog/instagram-objavljuje-sam/) · [sl](https://takebackmyinsta.com/sl/blog/instagram-objavlja-sam/) · [lt](https://takebackmyinsta.com/lt/blog/instagram-skelbia-pats/) · [lv](https://takebackmyinsta.com/lv/blog/instagram-publice-pats/) · [et](https://takebackmyinsta.com/et/blog/instagram-postitab-ise/) · [tr](https://takebackmyinsta.com/tr/blog/instagram-kendi-kendine-paylasim/) · [uk](https://takebackmyinsta.com/uk/blog/instagram-publikuie-sam/) HTML version: https://takebackmyinsta.com/blog/instagram-posting-without-you/