# Instagram Account Temporarily Locked? What to Do > Instagram says your account is temporarily locked for unusual activity? In Malaysia or anywhere, confirm it is you with the code, then secure email and logins. - URL: https://www.awarexone.com/research/instagram-account-temporarily-locked - Author: Md Shariar Shanaz Shuvon, Founder & CEO, AwareXone - Published: 2026-09-29 - Topics: Instagram, Account recovery, Malaysia - Related service: Instagram account recovery: https://www.awarexone.com/social-media-recovery/instagram-account-recovery ## Short answer A temporary lock is a security hold, not a ban. Instagram saw a login or activity it did not trust. Follow the screen in the official app and confirm it is you with the code sent to your existing email or phone. Then change your password and turn on two-factor authentication. Never share the code with anyone. ## Summary - A temporary lock is a security hold that Instagram places when it sees a login or activity it does not trust, not a ban for breaking the rules. - Follow the screen inside the Instagram app or website and confirm it is you with the security code sent to the email or phone already on the account. - Once back in, change your password, check login activity, remove apps you do not recognise and turn on two-factor authentication. - If the email or phone was changed by someone else, treat it as a hack and use instagram.com/hacked instead of waiting for the lock to lift. - Never give a code or password to anyone who messages you about the lock. Instagram does not contact you about account security through DMs. - Instagram decides whether and when an account is released, and nobody outside Meta can lift a lock for you. You open Instagram and, instead of your feed, you get a screen saying "Your account has been temporarily locked" or "We detected unusual activity". Your password worked a minute ago. You did not get a warning about any post. Now the app wants you to confirm who you are before it lets you back in. In most cases this is a security hold, not a punishment. Instagram thinks someone else may have been using your login, so it pauses the account until the real owner proves control, usually with a code sent to the email or phone already on the account. If you still have that email or phone, you can usually clear it yourself. This guide covers what the lock means, how to pass the check, what to fix afterwards, what to do if the code goes somewhere you cannot reach, and the scams that follow these notices. Last checked: 29 September 2026. ## What Does "Your Account Has Been Temporarily Locked" Mean on Instagram? It means Instagram saw a login or activity that might not be you, such as a new device, a new location or automated behaviour, and paused the account until you confirm your identity. Tap through the screen in the official app or on instagram.com, choose where to send the security code, enter it, and complete any extra check, such as a video selfie. Once back in, change your password and review login activity, because the lock may reflect a real attempt on your account. If someone changed the email or phone on the account, go to [instagram.com/hacked](https://www.instagram.com/hacked/) instead. Instagram makes the final call. ## Which Lock Screen Are You Seeing? The wording on these screens varies by app version, device and region, and Instagram's help centre does not publish one fixed text for them. What matters is what the screen asks you to do. The table below matches the common versions to what they usually mean and your first move. *Common Instagram lock and verification screens, at the time of writing. Wording varies.* | What the screen says | What it usually means | Your first move | | --- | --- | --- | | "Your account has been temporarily locked" with a "Continue" or similar button | A security hold; Instagram wants the owner to confirm control | Continue, pick the email or phone you still own, and enter the code | | "We detected unusual activity" or "We noticed unusual activity" | A login or behaviour on the account did not match your normal pattern | Confirm it is you, then check login activity for devices you do not recognise | | A request for a video selfie turning your head | Instagram wants to check a real person, and the account owner, is behind the request | Record it in good light inside the app; you may not have access while it is reviewed | | The code goes to an email or number you do not recognise | Someone has probably changed your contact details | Treat it as a hack: look for the security@mail.instagram.com email and use instagram.com/hacked | | "Your account has been disabled" or "We suspended your account" | Not a lock: a decision under Instagram's rules | Use the appeal option in the notice, not the security code route | | A DM or unfamiliar email saying your account will be locked or deleted | Almost certainly phishing | Do not click; check Recent emails in Accounts Center instead | ## Why Instagram Locks an Account Instagram does not publish a full list of triggers, and it would not want to, because a list would help attackers. What its help pages do describe points to three broad causes. - A login it does not trust. Instagram's page on [login requests](https://www.facebook.com/help/instagram/154776793259282) describes alerts when someone tries to log in from a device or web browser it does not recognise. A lock is a stronger version of the same reaction. - Your password in someone else's hands. A phishing page, a reused password from another site's breach, or a shared login can all put your details in the wrong place. - Automated or third-party access. Instagram's page on [restrictions for data scraping](https://www.facebook.com/help/instagram/740480200552298) says its systems may flag an account that gave its username and password to a third-party app or website, such as apps that offer likes or followers, or used a service to interact with Instagram in unauthorised ways. ## How to Get Through the Lock, Step by Step Do this from the official Instagram app or by typing instagram.com into your browser yourself. Never start from a link in a message. 1. Update the Instagram app so the verification screens load properly. 2. Open the app, tap through the lock screen and read which email address or phone number Instagram offers to send a code to. Screenshot the screen. 3. Choose the one you can open right now. Check the inbox, the spam folder and your SMS. 4. Enter the code in the Instagram app, not anywhere else. If it expires, request a fresh one once rather than tapping resend repeatedly. 5. Complete any extra step shown, such as a captcha or a video selfie. 6. When the app lets you in, go straight to the security checks in the next section before you do anything else. If the lock screen will not send a code, Instagram's [hacked account page](https://www.facebook.com/help/instagram/149494825257596) describes the fallback: on the login screen, tap "Forgot password?", enter your username, email or phone number, and choose "Send login link". It also says you may be able to request support on a mobile device, and asks you to give a secure email address that only you can access. For codes that simply never arrive, our guide to [a missing Instagram security code](https://www.awarexone.com/research/instagram-security-code-not-received) goes through the usual causes. > Warning: **The code is only for the Instagram screen.** A security code proves to Instagram that you hold the email or phone. Anyone who gets it from you can use it the same way. Do not read it out, forward it or type it into a page you reached from a DM, even if the sender uses the Instagram logo or says they are from Meta. ## If Instagram Asks for a Video Selfie Instagram may ask for a short video of your face turning in different directions. Its page on [video selfie checks](https://www.facebook.com/help/instagram/1053588012132894) says photos and IDs can be digitally modified, which is why it uses video, and that you will not have access to the account during the review. If you pass, you may get an email with a password reset link; if not, you may be able to resubmit in the app. If you choose not to do the selfie, you may not be able to log back in. Instagram's hacked account page adds that the video is never shown on Instagram and is deleted within 30 days. Record it in even light, face fully in frame, and submit once. ## What to Check Once You Are Back In Getting past the lock does not tell you why it happened. Assume someone may have tried your password and close every door they could use. Instagram's hacked account page lists the same basics for anyone who can still log in. - Change your password to one you have never used anywhere else. Instagram's [data scraping page](https://www.facebook.com/help/instagram/740480200552298) notes that changing it logs you out of all devices, including suspicious ones. - Review login activity. Instagram's [login requests page](https://www.facebook.com/help/instagram/154776793259282) shows the path: Security, then Login activity. Tap "This Wasn't Me" on anything you do not recognise and log out of devices you do not use. - Confirm your email and phone number are still yours in account settings. - Check Accounts Center and remove any linked accounts you do not recognise. - Revoke third-party apps you did not knowingly connect, especially follower or like apps. - Turn on two-factor authentication. Instagram's [two-factor page](https://www.facebook.com/help/instagram/566810106808145) recommends an authentication app, and says backup codes let you log in if you lose your phone or email. Store those codes offline. - Secure the email account behind Instagram too. Whoever controls that inbox can reset your Instagram. ## Can You Get Past the Lock Without the Old Email or Phone? Sometimes, but it is harder, and the answer depends on what you still have. Work through it in this order: - You can open the email or phone on the account: use the code. This is the normal route and the fastest. - You lost the email but still have the phone, or the reverse: pick the one you still have on the lock screen or in "Forgot password?". - You lost both, but they were yours: try to get the email back through your email provider first. Instagram's page on [lost email or phone access](https://www.facebook.com/help/instagram/358911864194456) says it cannot help you back into an email account, and that if you cannot access the registered email and did not link Instagram and Facebook, it is unable to give you access. For a lost Malaysian mobile number, ask your carrier whether the SIM can be replaced on the same number. - The email or phone was changed to someone else's: this is a takeover. Look for the email from security@mail.instagram.com about the change; Instagram's hacked account page says you may be able to undo it with "secure my account". Then use [instagram.com/hacked](https://www.instagram.com/hacked/). Instagram's [2022 announcement of instagram.com/hacked](https://about.instagram.com/blog/announcements/continuing-to-keep-instagram-safe-and-secure) says it covers hacked accounts, forgotten passwords, lost two-factor access and disabled accounts, and describes an option to ask two Instagram friends to confirm your identity, which may not appear for every account. For a real takeover, our step-by-step on [the first hour after an Instagram hack](https://www.awarexone.com/research/instagram-hacked-first-hour) is the better guide, and our piece on [losing your email, phone or 2FA](https://www.awarexone.com/research/lost-email-phone-2fa-account-recovery) covers the harder cases. If your phone suddenly shows "No service" at the same time as the lock, call your carrier from another phone. A SIM swap would let someone else receive your Instagram codes by SMS. ## Mistakes That Keep You Locked Out Longer - Hammering the resend button or retrying the login every few minutes. Repeated attempts may look like more of the same unusual activity. - Logging back in to the follower app that caused it. If a third-party tool triggered the lock, reconnecting it invites the next one. - Changing the password but not checking the email and phone on the account. If someone added their own details, they can reset the password again. - Opening a second account to get around the lock. It does nothing for the locked account, and it splits your followers and history across two profiles. - Trusting a DM or email about the lock. Instagram's page on [recent emails](https://www.facebook.com/help/instagram/760602221058803) says it will never reach out about account security through Direct Messaging. - Paying someone who promises to lift the lock. Nobody outside Meta can release an Instagram account, and anyone asking for your code is trying to take it. ## How to Spot the Scams That Follow a Lock Locks and security alerts make good bait, so scammers copy them. A fake "your account will be locked" email, a DM from a "Meta Support" page, or a stranger in the comments offering to help are the common openings. The goal is always the same: your password, your code or a payment. You can check whether an email is real without clicking anything in it. Instagram's [recent emails page](https://www.facebook.com/help/instagram/760602221058803) says you can see official emails from the last 14 days under Accounts Center, then Password and security, then Recent emails. It lists the addresses Instagram uses for security messages, including @mail.instagram.com and @support.instagram.com. If the message is not in that list, treat it as phishing. Our breakdown of [the fake Meta support scam in Malaysia](https://www.awarexone.com/research/fake-meta-support-scam-malaysia) shows what these messages look like. If you already typed your password or a code into a fake page, change the Instagram and email passwords from the real app straight away and log out other sessions. If money left your account, or you shared a banking OTP, call your bank's 24-hour hotline or the National Scam Response Centre on 997, then make a police report, in the order the [NSRC's own FAQ](https://nfcc.jpm.gov.my/index.php/en/about-nsrc) gives. The same FAQ says NSRC, PDRM, banks and other agencies will never ask for your password, PIN, TAC or OTP. You can also report phishing to CyberSecurity Malaysia through [Cyber999](https://www.cybersecurity.my/portal-main/services/cyber999-overview). > Note: **Instagram makes the decision.** Many locks clear once the owner confirms the code. Some take longer while a selfie or support request is reviewed, and an account whose contact details were taken over does not always come back. Only Meta can release an Instagram account. ## When Expert Recovery Help Makes Sense If the code reaches you, you do not need anyone's help, and this guide gives you everything required. A second pair of eyes is worth it when the lock is tied to a takeover, when the code goes to details you no longer control, or when the account carries your business. SocialSafe by AwareXone, our recovery service, reviews what happened and tells you honestly whether an official route is still open, using the same Instagram routes described here. Our [Instagram account recovery service](https://www.awarexone.com/social-media-recovery/instagram-account-recovery) explains how that review works, and our [Trust Center](https://www.awarexone.com/trust) sets out what we will never ask for, including your password and codes. ## Frequently Asked Questions ### How long does an Instagram temporary lock last? Instagram does not publish a fixed length. In most cases the lock stays until you confirm it is you with the code or selfie, so the fastest way out is to complete the check rather than wait. A video selfie review can take longer, and Instagram says you will not have access while it is reviewed. ### Why does Instagram keep locking my account after I change my password? Something is still triggering the check. Look for a third-party app with your login, an unknown device in login activity, or an email address on the account that is not yours. Remove each one, turn on two-factor authentication, then give it time rather than logging in repeatedly. ### Is a temporarily locked Instagram account the same as a disabled one? No. A lock is a security hold that you clear by proving you own the account. A disabled or suspended account is a decision under Instagram's rules, and the way back is the appeal option in the notice. ### Can I use Instagram on another phone to get around the lock? It is unlikely to help. The lock is on the account, and a new device can look like one more unfamiliar login. Complete the verification in the official app or website instead. ### Can AwareXone release a locked Instagram account? No, and nobody outside Meta can. SocialSafe by AwareXone reviews the case and helps you use the official routes properly, but Instagram makes the final decision. ## Official sources - [Instagram Help Center: I can't log in (read 29 September 2026)](https://help.instagram.com/374546259294234) - [Instagram Help Center: If you think your Instagram profile has been hacked (read 29 September 2026)](https://www.facebook.com/help/instagram/149494825257596) - [Instagram Help Center: Turn login requests on or off on Instagram (read 29 September 2026)](https://www.facebook.com/help/instagram/154776793259282) - [Instagram Help Center: Why your account has been restricted for data scraping (read 29 September 2026)](https://www.facebook.com/help/instagram/740480200552298) - [Instagram Help Center: Why you might be asked to upload a video selfie (read 29 September 2026)](https://www.facebook.com/help/instagram/1053588012132894) - [Instagram Help Center: Lost access to email or phone number linked to Instagram account (read 29 September 2026)](https://www.facebook.com/help/instagram/358911864194456) - [Instagram Help Center: Securing your Meta Account with two-factor authentication (read 29 September 2026)](https://www.facebook.com/help/instagram/566810106808145) - [Instagram Help Center: Review recent emails sent from Instagram (read 29 September 2026)](https://www.facebook.com/help/instagram/760602221058803) - [About Instagram: Continuing to keep Instagram safe and secure, 15 December 2022 (read 29 September 2026)](https://about.instagram.com/blog/announcements/continuing-to-keep-instagram-safe-and-secure) - [NFCC: About the National Scam Response Centre (NSRC) (read 29 September 2026)](https://nfcc.jpm.gov.my/index.php/en/about-nsrc) - [CyberSecurity Malaysia: Cyber999 overview (read 29 September 2026)](https://www.cybersecurity.my/portal-main/services/cyber999-overview) --- AwareXone is an independent Malaysia-based provider, not affiliated with any platform. The platform makes the final decision on every account. AwareXone never asks for passwords, OTP codes, backup codes or session cookies.