# Instagram Security Code Not Received? What to Check > Instagram security code or reset email not arriving in Malaysia? Why codes go missing, what to check first, and the official ways back in without waiting. - URL: https://www.awarexone.com/research/instagram-security-code-not-received - Author: Md Shariar Shanaz Shuvon, Founder & CEO, AwareXone - Published: 2026-09-29 - Topics: Instagram, Account recovery, Malaysia - Related service: Instagram account recovery: https://www.awarexone.com/social-media-recovery/instagram-account-recovery ## Short answer Usually Instagram is sending the code and something is stopping it, not a ban. Search every email folder for mail from mail.instagram.com and use only the newest one. In Malaysia, telcos block texts containing links, so ask for the login link by email. With two-factor authentication on, use a saved backup code or authentication app instead. ## Summary - A missing Instagram code is usually a delivery problem, such as a spam folder, a mistyped address or a text your phone never received, not a ban. - Search every folder for mail from mail.instagram.com, use only the newest email, and try the other option, email or phone, that Instagram offers. - In Malaysia, telcos block text messages that contain links, so ask for the login link by email or use a six digit code instead. - If you use two-factor authentication, a saved backup code, an authentication app or a trusted device gets you in without waiting for a text. - Nobody from Instagram or Meta will ask you to send them a code, and anyone offering paid recovery in exchange for your codes is running a scam. - If the email or number on the account is no longer yours, the route is different, and Instagram decides whether the account can be recovered. You tapped "Forgot password?" or Instagram asked for a security code, and nothing arrived. You refresh your inbox, check your messages, tap send again, and still nothing. The email and phone number on the account are yours. The code just is not getting to you. In most cases the account is fine and the problem is delivery. The email went to spam, the address on the account has a typo, or the text message was blocked or sent to a number you no longer check. Work out which code you are waiting for, check the few places it can go missing, and if you use two-factor authentication, use a backup method instead of waiting. This guide covers reset emails, login links and six digit codes, a Malaysian reason text links go missing, and the scams aimed at people stuck here. If the email or phone on the account is no longer yours, start with our guide to [logging in after losing your email, phone or 2FA](https://www.awarexone.com/research/lost-email-phone-2fa-account-recovery). Last checked: 29 September 2026. ## Why Is Instagram Not Sending My Security Code? Usually Instagram is sending it, and something on the way is stopping it. Instagram's page on [reset emails that do not arrive](https://help.instagram.com/407128569340564) names two causes: spam filtering, or an address mistyped at sign-up. It suggests checking spam, resetting through a linked Facebook account, and asking your email provider to allow mail from @instagram.com. In Malaysia, telcos block text messages that contain links, so ask for a login link by email instead. With two-factor authentication on, Instagram says a [backup code](https://help.instagram.com/1006568999411025) completes login when a code cannot be delivered. ## Which Code Are You Waiting For? Each kind of code goes missing for different reasons, so look at the screen before you change anything. Wording varies by app version, device and region. - A login link or reset email: after "Forgot password?" and "Send login link", Instagram's page on [recovering your password](https://help.instagram.com/409847499070242) says the link goes to your email or phone. - A six digit text: Instagram's page on [SMS two-factor authentication](https://help.instagram.com/843785199163974) says it sends a 6-digit security code whenever someone logs in from a device it does not recognise. - An authentication app code: nothing is sent. An app such as Duo Mobile or Google Authenticator makes the code on your phone, so waiting for a text never works. *Missing Instagram codes and links, with the first thing to check. Wording varies by app version and region.* | What you see | Most likely cause | What to do first | | --- | --- | --- | | You tapped "Send login link" and no email arrives | The email is in spam or another folder, or is still on its way | Search every folder for mail.instagram.com, then request one new link and use only the newest | | The link opens but the reset fails | An older email has expired, or you chose to log in instead of reset | Request a new email and choose the option to reset your Instagram password | | Instagram says your email address cannot be found | The account was registered with a different address, or the address was mistyped | Try other emails, phone numbers and usernames you have used, or "Reset using Facebook" | | A login link by text never arrives, and you are in Malaysia | Malaysian telcos block text messages that contain links | Choose email for the link instead, or use a six digit code where offered | | No six digit text arrives when two-factor authentication asks | The number is wrong, the SIM is inactive, or delivery failed | Use a backup code, an authentication app or another method under "Try another way" | | Your phone shows "No service" and codes stopped at the same time | Possible SIM swap: someone may have moved your number | Call your telco from another phone straight away, then secure your email | ## If the Reset Email or Login Link Never Arrives Email problems are the most common and the easiest to fix yourself. Work through these in order. 1. Search the whole mailbox for "mail.instagram.com", the only address Instagram says its emails come from. Include spam, junk and tabs such as Promotions or Updates in Gmail. 2. Check the right mailbox. The email goes to the address on the Instagram account, which may be an old Yahoo or Hotmail address rather than the one you use daily. 3. Request one new email and wait a few minutes. Instagram's page on [reset links that do not work](https://help.instagram.com/158807987592157) says an older email may have expired, so use only the newest. 4. In that email, choose to reset your Instagram password. Instagram says not to choose the option to log in from the email. 5. On a work or school address, ask IT whether mail from @instagram.com is blocked or held. 6. If Instagram and Facebook are linked, tap "Reset using Facebook", as Instagram's page on [emails that cannot be found](https://help.instagram.com/372185676193504) describes. 7. Still nothing? Open [Instagram's secure account page](https://www.instagram.com/hacked/) in a browser and follow the on-screen steps. > Note: **A mistyped email at sign-up is a hard stop.** Instagram says that if you mistyped your email address when you signed up, it cannot give you access to the account through that address. If you cannot reach the registered email and the account is not linked to Facebook, Instagram says it is unable to give you access. Check this before you spend days waiting for an email that is going to an address you never owned. ## If the Text Message Code Never Arrives A six digit text can fail for reasons that have nothing to do with Instagram. Rule out your own phone and line first. - Check the number. If the code screen shows part of an old number, the code is going there. - Check the SIM is active. Prepaid lines lapse without a reload, and a new SIM means a new number unless you ported the old one. - Check signal and roaming. Toggle airplane mode, and make sure your line receives texts abroad if you are travelling. - Check blocked senders and spam filters, including any filtered or unknown senders folder. - Watch for "No service" out of nowhere. If service and codes stop together, someone may have moved your number to a new SIM. Call your telco from another phone. Instagram does not publish a limit on code requests. Sending again and again does not speed anything up, so wait a few minutes between requests and use the newest code. ## Why SMS Login Links Can Go Missing in Malaysia Malaysia has a rule that catches many people at this screen. MCMC directed telcos to block text messages that contain links, requests for personal information or callback numbers, and ended the exemption for business short codes from 1 September 2024, as reported by [Berita RTM](https://berita.rtm.gov.my/highlights/senarai-berita-highlights/senarai-artikel/beware-of-prohibited-content-in-sms/). CelcomDigi's [help page on the SMS block](https://help.celcomdigi.com/en/support/solutions/articles/70000653010-blocking-of-sms-containing-url-link-personal-details-phone-numbers-and-or-others) says messages with a URL are blocked, that the block applies even when roaming, and that there is no option to unblock them. Instagram's "Send login link" option can send a link to your phone by text, and a text that carries a link is what this rule blocks. Instagram does not explain how it handles this for Malaysian numbers, so we cannot say every link text fails. If a login link by SMS never arrives on a Malaysian number, stop waiting and choose email for the link instead, or use a plain six digit code if the screen offers one. MCMC also treats any text with a link as high risk. If one claiming to be from Instagram gets through, do not tap it; open the app yourself. ## Two-Factor Codes: Use Another Method Instead of Waiting If two-factor authentication is on, you rarely need the text at all. Instagram's page on [securing your account with two-factor authentication](https://help.instagram.com/566810106808145) lists three security methods: an authentication app, which it recommends, a text message, and WhatsApp, which you can add after turning on text messages. Any method you set up earlier can replace the one that is failing. 1. A backup code, if you saved them. Instagram says they are for finishing login when a code cannot be delivered. 2. An authentication app, if you set one up. It works without signal because nothing is sent. 3. A trusted device. Instagram says a device marked "Trust this device" will not ask for a code again, so use an old phone or laptop that is still logged in. 4. WhatsApp, if you turned that option on. Look for the code there, not in your texts. 5. Another option on the code screen, such as "Try another way". Some routes lead to a video selfie or other identity check. Instagram says you must be logged in to view or replace backup codes, so they only help if you saved them earlier. Save them first once you are back in; our [two-factor authentication setup guide](https://www.awarexone.com/research/two-factor-authentication-instagram-facebook-tiktok) shows where. If Instagram sends you to an identity check instead of a code, see our guide to [the confirm it's you screen](https://www.awarexone.com/research/instagram-confirm-its-you-login). ## When the Email or Phone Number Itself Is the Problem Sometimes the code is arriving, just somewhere you cannot see it. Instagram's page on [a reset email for the wrong profile](https://help.instagram.com/228124510648475) says this usually means the account you want was registered with a different email, and suggests trying any other emails, phone numbers or usernames you have used. If you no longer control the email or number at all, Instagram's page on [lost access to your email or phone](https://help.instagram.com/358911864194456) says to try to regain it through your email provider first, and adds that Instagram cannot help you get back into your email account. Once you can log in to Instagram, change the email and phone on the account to ones you control. If the account now shows an email you do not recognise, treat it as a takeover. Instagram's page for a [hacked profile](https://www.facebook.com/help/instagram/149494825257596) says an email from security@mail.instagram.com about the change may let you undo it with "secure my account"; otherwise request a login link or support from a mobile device. ## Codes You Did Not Ask For, and People Who Ask for Yours Instagram's page on [reset emails you did not request](https://help.instagram.com/231141655544451) says one does not necessarily mean you were hacked, since someone may have typed your details by mistake. Only people who know your password or click the login link can log in, and an email not from @mail.instagram.com may be phishing. A person asking for your code is different. A common Malaysian script arrives by DM, in English, Malay or Chinese: "Saya tersalah hantar kod kepada nombor awak, boleh forward?" Another is a "Meta Support" page saying your account will be deleted unless you verify. Whoever has your code can log in or reset your password. > Warning: **Never send a code to anyone.** Instagram, Meta and every legitimate helper work without your password, login codes or backup codes, and that includes us. MCMC has warned the public to be cautious of parties offering account recovery services in exchange for money, personal information or verification codes. If you already shared a code or lost money, call your bank and the National Scam Response Centre on 997, then make a police report. The government's [NSRC 997 page](https://www.malaysia.gov.my/en/categories/safety-and-community/cybersecurity/nsrc-997-hotline) asks victims to call within 24 hours of discovering the scam so accounts and transactions can be blocked. For the account takeover itself, you can report the incident to [CyberSecurity Malaysia's Cyber999](https://www.cybersecurity.my/portal-main/services/cyber999-overview) through its online form, email, phone or mobile app. Scam texts that still get through can be reported to MCMC at aduan.mcmc.gov.my. Our breakdown of [the fake Meta support scam](https://www.awarexone.com/research/fake-meta-support-scam-malaysia) shows what these messages look like. ## Mistakes That Make a Missing Code Harder to Fix - Requesting code after code, then typing an older one that no longer works. - Checking only the inbox, never spam, other tabs or other email accounts. - Waiting days for a text link on a Malaysian number instead of switching to email. - Logging out of, or wiping, an old phone that was still logged in. It may be your easiest way back. - Forwarding a code to a friend, a "support agent" or a paid recovery page. - Changing SIM or porting your number in the middle of a recovery. ## When Expert Recovery Help Makes Sense Most missing-code problems are solved with the steps above, and you do not need anyone's help for them. A review is worth considering when the email or number on the account has been changed by someone else, when an identity check keeps failing, or when the account supports your business and you cannot afford a wrong step. SocialSafe by AwareXone, our recovery service, looks at where you are stuck and what you have already tried, then tells you honestly whether an official route is still open. We work through Instagram's own processes, and we will never ask you for a code. Our [Instagram account recovery service](https://www.awarexone.com/social-media-recovery/instagram-account-recovery) explains how the review works, and our [Trust Center](https://www.awarexone.com/trust) sets out what we never ask for. Instagram makes the final decision, and some accounts cannot be recovered. ## Frequently Asked Questions ### Why am I not getting Instagram's SMS code in Malaysia? First check that the number on the account is yours, the SIM is active and texts from short codes are not filtered. If you asked for a login link by text, Malaysian telcos block text messages that contain links, so ask for the link by email instead. ### How long does an Instagram reset email take to arrive? Instagram does not publish a delivery time. If nothing arrives after a few minutes, search every folder for mail.instagram.com, then request one new email and use only the newest, because Instagram says an older one may have expired. ### Can I log in to Instagram without the security code? Yes, if you set up another method earlier. A saved backup code, an authentication app, WhatsApp codes or a trusted device that is still logged in can all replace the text. Without any of these, use the options Instagram shows on the code screen. ### I got an Instagram security code I did not request. Am I hacked? Not necessarily. Someone may have entered your details by mistake. Do not share the code with anyone, check the sender is @mail.instagram.com, and change your password and turn on two-factor authentication if you are worried. ### Can AwareXone get the code sent to me? No. Only Instagram sends codes, and nobody outside Meta can resend them or skip that step. SocialSafe by AwareXone can review your case and help you choose the right official route, and we never ask for your password or codes. ## Official sources - [Instagram Help Center: If you didn't receive the password reset email you requested from Instagram (read 29 September 2026)](https://help.instagram.com/407128569340564) - [Instagram Help Center: Links in password reset email from Instagram aren't working (read 29 September 2026)](https://help.instagram.com/158807987592157) - [Instagram Help Center: Recover your Instagram password (read 29 September 2026)](https://help.instagram.com/409847499070242) - [Instagram Help Center: What you can do if your email address can't be found during a password reset (read 29 September 2026)](https://help.instagram.com/372185676193504) - [Instagram Help Center: Why you're receiving a password reset email for the wrong Instagram profile (read 29 September 2026)](https://help.instagram.com/228124510648475) - [Instagram Help Center: Why you received an Instagram password reset email that you didn't request (read 29 September 2026)](https://help.instagram.com/231141655544451) - [Instagram Help Center: Lost access to email or phone number linked to Instagram account (read 29 September 2026)](https://help.instagram.com/358911864194456) - [Instagram Help Center: Securing your Meta Account with two-factor authentication (read 29 September 2026)](https://help.instagram.com/566810106808145) - [Instagram Help Center: Use text messages (SMS) for two-factor authentication on Instagram (read 29 September 2026)](https://help.instagram.com/843785199163974) - [Instagram Help Center: How you can use a backup code on Instagram (read 29 September 2026)](https://help.instagram.com/1006568999411025) - [Instagram Help Center: If you think your Instagram profile has been hacked (read 29 September 2026)](https://www.facebook.com/help/instagram/149494825257596) - [Instagram: Hacked account support](https://www.instagram.com/hacked/) - [Berita RTM: Beware of prohibited content in SMS, MCMC enforcement from 1 September 2024 (read 29 September 2026)](https://berita.rtm.gov.my/highlights/senarai-berita-highlights/senarai-artikel/beware-of-prohibited-content-in-sms/) - [CelcomDigi Help Centre: Blocking of SMS containing URL link, personal details, phone numbers and/or others (read 29 September 2026)](https://help.celcomdigi.com/en/support/solutions/articles/70000653010-blocking-of-sms-containing-url-link-personal-details-phone-numbers-and-or-others) - [MCMC: Media statement on complaints related to WhatsApp accounts, 25 September 2026](https://www.mcmc.gov.my/skmmgovmy/media/General/pdf2/MEDIA-STATEMENT_MCMC-INVESTIGATING-COMPLAINTS-RELATED-TO-WHATSAPP-ACCOUNTS.pdf) - [Malaysian government: NSRC 997 hotline (updated 31 July 2026)](https://www.malaysia.gov.my/en/categories/safety-and-community/cybersecurity/nsrc-997-hotline) - [CyberSecurity Malaysia: Cyber999 overview (read 29 September 2026)](https://www.cybersecurity.my/portal-main/services/cyber999-overview) --- AwareXone is an independent Malaysia-based provider, not affiliated with any platform. The platform makes the final decision on every account. AwareXone never asks for passwords, OTP codes, backup codes or session cookies.