Back to Facebook Page Violation Scam Phishing

This is a version of Facebook Page Violation Scam in Phishing.

Fake Instagram suspended account recovery page on GitHub Pages that asks for your password and personal details

A page titled "Insta Recovery" at instagram-id-disabled.github[.]io/suspended/paid-recover shows the Instagram logo and the heading "Disable Suspended Recovery". It is aimed at people whose Instagram account has been, or is said to have been, suspended or disabled. The form asks for your full name, your Instagram login ID, your password, your date of birth, your gender and a contact email, then shows a "Proceed" button. It is not run by Instagram or Meta. It is hosted on GitHub Pages, a free website service. Submitting a valid password to an untrusted page could put the account at risk, but the submission destination and any resulting account access were not established.

Fake Instagram suspended account recovery page on GitHub Pages that asks for your password and personal details | Screenshot

What’s different in this version

These traits set this message apart from the usual pattern.

  1. This version targets Instagram account holders and uses an account suspension or disabled-account lure instead of a Facebook Page violation warning.

  2. The web address puts "instagram-id-disabled" in front of github[.]io, so the page sits on GitHub's free hosting service rather than on an Instagram or Meta address.

  3. The address path ends in "paid-recover". The page itself did not show a price, and no payment step was captured.

  4. The form asks for your Instagram password in a plain text box, together with your full name, date of birth, gender and a separate contact email. These requests create a risk if valid credentials are submitted, but no account takeover was observed.

  5. A line under the button says "This is a secure verification portal. We do not store sensitive information." Real Instagram recovery never asks for your password on an outside website.

  6. Only the first form was captured. What the page shows after "Proceed" and where the details are sent were not recorded. How the link reached people was also not recorded.

Other variations of this scam

Other reported versions of this scam.

Related scams

Other patterns in the same category, or that share a brand with this report.

How this scam works

  1. 1

    Step 1: You receive a message or email that looks like it’s from Meta/Facebook saying your Page violated rules.

  2. 2

    Step 2: The message includes a case ID and a link to 'appeal' or 'chat with support' right away.

  3. 3

    Step 3: The link opens a fake Facebook/Meta page that asks for your login and sometimes your 2FA code.

  4. 4

    Step 4: If you enter details, scammers sign in to your real account, change passwords, and take control.

  5. 5

    Step 5: They may run paid ads, message your followers, or demand money to 'unlock' your Page.

✓ Do this

  • Check Page Quality/Account Quality inside Facebook or the Business Suite—don’t trust the message.
  • Turn on two-factor authentication (2FA) and use a strong, unique password.
  • Remove unknown admins from your Page and review ad account activity regularly.

✗ Avoid this

  • Do not click links in unexpected messages about violations or locks.
  • Do not enter your Facebook login or 2FA code on sites that aren’t facebook.com or meta.com.
  • Do not chat with 'support' on third‑party sites or give remote access to your device.
  • Do not pay fees or provide card details to 'unlock' your Page.
  • Do not trust case IDs, logos, or addresses in the message—check inside Facebook instead.

Verbatim excerpts from the scam

Exact lines from emails or messages—searchable text so you can compare wording.

  1. 1 Excerpt 1
    Insta Recovery
  2. 2 Excerpt 2
    Disable Suspended Recovery
  3. 3 Excerpt 3
    Login ID Number, username, or email
  4. 4 Excerpt 4
    Password Enter your password
  5. 5 Excerpt 5
    Contact Email Enter your contact email
  6. 6 Excerpt 6
    This is a secure verification portal. We do not store sensitive information.