Instagram Users Warned of Phishing Risk After Password Reset Email Surge
Ignore unsolicited reset emails and enable two-factor authentication.
Cybersecurity experts are urging Instagram users in Ireland to remain vigilant for phishing attempts after a surge of unexpected password reset emails caused widespread confusion online.
ESET Ireland has issued the warning following an incident where Instagram users received unsolicited password reset emails. While Instagram has confirmed it fixed the issue and that no breach occurred, security experts say the confusion creates ideal conditions for criminals to exploit.
Instagram publicly stated that an external party was able to request password reset emails for some users, but emphasised that its systems were not breached and that accounts remain secure. The company advised users to simply ignore the emails.
However, ESET Ireland warns that such incidents often trigger a spike in phishing scams, as criminals exploit the uncertainty to trick people into handing over login credentials, verification codes, or payment details.
George Foley, spokesperson at ESET Ireland, said:
"Even when a platform says there is no breach, situations like this can still be highly useful to criminals. A wave of genuine password reset emails creates uncertainty, and that is exactly when phishing spikes. People are more likely to click, respond, or try to 'fix' the problem through the wrong route.
The safest approach is to ignore password reset emails unless you personally requested them, and to be especially cautious of any follow-up messages claiming to be from Instagram in the days ahead. That is often where criminals attempt to steal credentials by impersonating security teams or pushing fake verification prompts."
ESET Ireland recommends users go directly to the Instagram app or official website to check security settings if they have concerns. The company also advises enabling two-factor authentication and using a strong, unique password.
Instagram has confirmed that receiving a password reset email does not necessarily mean an account has been hacked, and encourages users to verify official emails and secure their accounts.
ESET Ireland, based in Wexford, is the exclusive Irish distributor of ESET digital security solutions, protecting consumers and businesses across the country.
