Instagram and Snapchat fans are being warned not to fall victim to a new scam being peddled by cyber criminals. Instagram and Snapchat are two of the most well know social networks around. Instagram has over a billion active users each and every month, while Snapchat at last count had 186million active users each day. And the huge userbase of Instagram and Snapchat are being warned about a scam that fraudsters have been carrying out.
Action Fraud, the UK’s national reporting centre for fraud and cybercrime, has received multiple reports of the scam in question.
Snapchat and Instagram users have reported their accounts being compromised after handing over their 2FA codes to fraudsters.
Two Factor Authentication – or 2FA – adds an extra layer of security for login details.
Besides entering your typical password, when 2FA is enabled a secret code is sent to a user’s device via an SMS.
This also needs to be entered to have access to a user’s account.
But scammers have been tricking Instagram and Snapchat users into handing over their 2FA codes and then extorting them for money.
Cyber crooks have been threatening victims with having their personal photos shared publicly unless they send them money.
Advising Instagram and Snapchat fans on how to stay safe, Action Fraud said: “Don’t respond to messages that ask for your login details or two-factor authentication (2FA) codes.
“These can be used to compromise your account.
“Use the report functions within Snapchat and Instagram to flag spam messages, or accounts that may have been hacked.”
If you have fallen victim to fraud or cybercrime then you can also report it to Action Fraud – click here to be directed to their website.
The news comes after Instagram users were also warned about another phishing scam sweeping the social networking site.
The scam sees Instagram users receiving messages from followers saying they’ve somehow ended up on something called the ‘Nasty List’.
Messages will have an embedded link and look something like this: “OMG your actually on here, @TheNastyList_xx, your number is 26! its really messed up.”
When Instagram users click on the Nasty List profile link it leads them to a page which claims it will let the user see everyone on this alleged mystery list.
However, to do so they are asked to provide their Instagram username and password.
If they do that then scammers will be able to hack into their account and spread the Nasty List scam even further.
Speaking about the threat, security firm Sophos said: “Anyone entering their credentials will find themselves in a spot of trouble, starting with their entire base of followers receiving the same message telling them that they too are on the Nasty List – and so the social media phishing attack grows.
“They’ll also potentially have handed control of their account to criminals to do whatever they want with.”