Instagram users are being warned about a new scam that encourages people to hand over their login details to crooks.
The so-called ‘Nasty List’ swindle is rapidly spreading across the popular photo-sharing platform, fooling unwitting users.
The phishing scam lures people in by sending messages to users saying they have been spotted on the ‘Nasty List’.
The profile people are then directed to will be called ‘The Nasty List’, followed by a series of numbers.
The profile includes a link to a website and claims that it will let you see the list – but the list doesn’t really exist.
Cybersecurity firm Sophos has also put out a warning about the scam.
“Anyone entering their credentials will find themselves in a spot of trouble, starting with their entire base of followers receiving the same message telling them that they too are on the Nasty List – and so the social media phishing attack grows,” Sophos explained.
“They’ll also potentially have handed control of their account to criminals to do whatever they want with.”
An Instagram spokesperson said: “Fake and fraudulent activity is not allowed on Instagram.
“We proactively fight against this type of content and are always improving our systems to quickly detect and remove anything that violates our Community Guidelines.”