# How to Report an Instagram Shop or Seller Scam

> Paid an Instagram shop that vanished? Report the seller account, save chat and payment proof, warn followers, and in Malaysia call your bank and NSRC on 997.

- URL: https://www.awarexone.com/research/how-to-report-an-instagram-shop-or-seller-scam
- Author: Md Shariar Shanaz Shuvon, Founder & CEO, AwareXone
- Published: 2026-11-09
- Topics: Instagram, Scams, Malaysia
- Related service: Social media content removal: https://www.awarexone.com/social-media-recovery/social-media-content-removal

## Short answer

Report the profile or message in the Instagram app, then save screenshots and stop transferring money. Meta reviews against its fraud rules and may disable the account, warn you, or take no action. Reporting does not refund losses. In Malaysia also file with PDRM or the bank if money moved.

## Summary

- Common Instagram scams follow set scripts, including fake investment returns, romance requests for money and brands or celebrities used as bait, under Meta's fraud policy.
- Report the account as scam, fraud or spam from its profile, and save the account's URL, messages and any payment details before you report.
- Meta can remove content, restrict advertising, limit features or disable an account, and automated systems also act on patterns such as unsolicited mass messaging.
- There is no published fixed review time, and some reports close without a visible change, so resubmit with clearer evidence if the account is still active.
- If you already paid, contact your bank immediately and call the National Scam Response Centre on 997, and check a suspicious account or number on PDRM's Semak Mule portal before paying anyone else.
- Instagram decides what happens to the account, and anyone who contacts you first promising to recover your money for a fee is very likely another scam.

An account you have never followed messages you about an investment that doubled someone's money last week. A profile using a well-known brand's logo is running a giveaway that needs your bank details to claim. Someone who has been chatting with you for weeks suddenly needs money for an emergency. These are three different scripts, but they share the same fix: report the account, and know what actually happens once you do.

Reporting as "scam, fraud or spam" tells Instagram the account is trying to take something from you dishonestly, which is a different category from harassment or impersonation. This guide covers how the common scripts work, how to report accurately, what Meta's policy actually prohibits, and the Malaysian steps to take if money has already moved.

Last checked: 9 November 2026.

## Quick Answer

To report a scammer on Instagram, open the account's profile or the message itself, tap the menu, choose "Report", and select the category for scam, fraud or spam. Save the account's URL, its username and any messages or payment requests before you report, because the account can delete content or disappear. Meta's enforcement can include removing content, restricting an advertising account, limiting features or disabling the account entirely, with no published timeline. If you already sent money, contact your bank and call the National Scam Response Centre on 997 immediately, separately from the platform report.

## How Do Instagram Scam Accounts Usually Work?

Meta's own policy on [prohibited commercial practices](https://transparency.meta.com/policies/community-standards/fraud-deception/) names the patterns its reviewers look for, and most scams reported on Instagram fit one of them:

*Matching the message to the script helps you decide what to screenshot and how urgently to act*

| Script | How it usually opens | What it actually wants |
| --- | --- | --- |
| Investment scheme | A DM or comment claiming fixed or quick returns, often with screenshots of past profits | Your money, moved to a wallet or account the scammer controls |
| Romance scheme | A new follower builds a relationship over weeks before asking for help | Money sent for a fabricated emergency, often repeatedly |
| Brand or celebrity bait | A fake Page or comment using a real brand's or public figure's name and image | Your payment details or personal information for a fake giveaway or discount |
| Advance fee or fake job | A message offering a job, loan or prize that needs an upfront fee first | A one-off payment that the "reward" never arrives to cover |
| Fake shop | An ad or Page selling goods at an unusually good price | Payment for an item that is never delivered, or arrives as something else |

## Red Flags Worth Checking Before You Reply

- A promise that returns are certain, fixed or risk-free: Meta's own policy treats this kind of promised investment return as a prohibited practice on its own.
- Pressure to act within hours, or claims that a deal or opportunity will close soon.
- A request to pay an upfront fee before receiving a loan, job, prize or refund.
- A new account with few posts, a recently changed username, or a profile photo that looks copied from elsewhere.
- Any request to move the conversation off Instagram to a messaging app before any money changes hands.
- A "support" account that messaged you first, rather than one you contacted through an official channel.

## How to Report a Scammer Account

From the account's profile, tap the three dots in the top right and choose "Report", then select the category for scam, fraud or spam and follow the prompts, as described on [Instagram's report a post or profile page](https://help.instagram.com/192435014247952). If the scam arrived as a direct message, report it from inside the chat so the message content itself reaches the reviewing team, rather than reporting only the profile. [Instagram's help centre](https://help.instagram.com/2922067214679225) also lists separate forms for related issues, such as a fake ad, if the scam is running as paid advertising rather than an organic post.

1. Screenshot the profile, the message and any payment details, with the date visible.
2. Copy the account's exact profile URL.
3. Report the account as scam, fraud or spam.
4. If it arrived by message, also report the chat itself.
5. Block the account once the report is submitted.
6. Warn anyone else you know the scammer may be contacting.

## What Actually Happens After You Report?

Meta's enforcement options for this policy, as described on its [fraud and deception policy page](https://transparency.meta.com/policies/community-standards/fraud-deception/), include removing the content or ads, reducing distribution, restricting advertising accounts, limiting features, requiring verification, or disabling the account. Meta also says automated systems act on behavioural patterns, such as sending unsolicited messages to accounts that do not follow back, independently of individual reports. There is no published fixed timeline, and Meta itself says its enforcement is not perfect and will not catch every violation.

## If You Already Paid or Shared Your Details

Act on the money before the report. Contact your bank's fraud hotline straight away, and call the National Scam Response Centre on [997](https://www.malaysia.gov.my/en/categories/safety-and-community/cybersecurity/nsrc-997-hotline), which coordinates with banks and the police to try to block a transaction before it clears. Before paying anyone new, including someone claiming to help you recover money already lost, check the receiving account number or phone number on PDRM's [Semak Mule portal](https://semakmule.rmp.gov.my/), which checks against police scam reports. File a police report once you have made the bank and NSRC contact, and report the cyber incident to [Cyber999](https://www.cybersecurity.my/portal-main/services/cyber999-overview) for technical analysis and escalation support.

> Warning: **Recovery scams target scam victims a second time.** Anyone who contacts you first, after you have already lost money, offering to recover it for an upfront fee is almost always a second scam. Report them the same way, and never pay another stranger to undo the first payment.

## If the Scammer Is Impersonating a Brand or a Public Figure

Brand-bait and celebrity-bait scams use a real business's or person's name and image to look credible. If the fake account is also pretending to be a specific identifiable person or business, add an impersonation report alongside the scam report; our guide to [reporting a fake Instagram account for impersonation](https://www.awarexone.com/research/how-to-report-a-fake-instagram-account-for-impersonation) covers that route in detail. A business whose brand is being used this way should also warn its real followers from its genuine, verified account.

## What Not to Do

- Do not send any further payment, even a small one, to "verify" an account or "release" a frozen payout.
- Do not share your banking login, OTP or one-time codes with anyone, including someone claiming to be from your bank or the police.
- Do not try to confront or negotiate with the scammer; report and block instead.
- Do not delete the evidence after reporting; your bank, NSRC or the police may ask for it.

## If Instagram Does Not Act

If the account is still active after a reasonable wait, check that the category matched the content exactly and resubmit with clearer screenshots, including any payment request. Where a Malaysian business or group of victims is affected, MCMC's [complaint portal](https://www.mcmc.gov.my/en/make-a-complaint/make-a-complaint) is a separate channel for harmful content left up on a licensed platform. Our guide to [what to do when a report is rejected](https://www.awarexone.com/research/report-rejected-content-not-removed-what-next) covers general escalation in more depth.

## When a Case Review Makes Sense

A single accurate report resolves most individual scam accounts. A case review can help when several accounts are running the same script against your customers, the scam overlaps with a compromised business account, or the evidence needs organising across platforms. SocialSafe by AwareXone reviews the case first, works only through official report forms, and never asks for your password, OTP or banking details. Read [how we work](https://www.awarexone.com/trust), or start at the [recovery and removal hub](https://www.awarexone.com/all-types-of-social-media-problem-solutions) if your own account has also been affected.

## Frequently Asked Questions

### Will reporting a scam account get my money back?

No. A platform report can get the account removed or restricted, but it does not move money. Contact your bank and the National Scam Response Centre on 997 separately and as soon as possible if you have already paid.

### How can I tell a fake investment post from a real one?

Meta's own policy treats a fixed or risk-free promised return, or screenshots of past gains used to sell the scheme, as signs of a prohibited scheme on their own. A real investment never promises a fixed return.

### The scammer blocked me after I paid. What now?

Contact your bank's fraud line immediately and call NSRC on 997, then make a police report. Being blocked does not stop the bank and police process, and your screenshots and messages remain useful evidence even if you can no longer see the account.

### Is it a crime to run a scam on Instagram in Malaysia?

Financial scams of this kind can involve cheating offences under the Penal Code and other laws, enforced by the police. Report the account to Instagram and, where money is involved, to the police and NSRC as well.

### Can AwareXone recover money I lost to a scammer?

No. We are not a bank or a law enforcement agency, and recovering lost funds goes through your bank, NSRC and the police. SocialSafe by AwareXone can help with the platform reporting side of a case where it overlaps with a compromised or impersonated account.

## Official sources

- [Instagram Help Center: Report a post or profile on Instagram](https://help.instagram.com/192435014247952)
- [Instagram Help Center: Report content on Instagram](https://help.instagram.com/2922067214679225)
- [Meta Transparency Center: Prohibited Commercial Practices policy](https://transparency.meta.com/policies/community-standards/fraud-deception/)
- [Malaysian government: NSRC 997 hotline](https://www.malaysia.gov.my/en/categories/safety-and-community/cybersecurity/nsrc-997-hotline)
- [PDRM: Semak Mule portal](https://semakmule.rmp.gov.my/)
- [CyberSecurity Malaysia: Cyber999 overview](https://www.cybersecurity.my/portal-main/services/cyber999-overview)
- [MCMC: Make a complaint](https://www.mcmc.gov.my/en/make-a-complaint/make-a-complaint)

---

AwareXone is an independent provider serving clients worldwide, not affiliated with any platform. The platform makes the final decision on every account. AwareXone never asks for passwords, OTP codes, backup codes or session cookies.