New scams are on the rise as we ring in 2026, the latest of which is an Instagram email scam prompting users to reset their passwords.

In a post on January 10, Instagram said these emails are not the result of a system breach, but rather “an issue that let an external party request password reset emails for some people.” They reiterated that “Instagram accounts are secure” and told users, “You can ignore those emails — sorry for any confusion.”

Reports say the emails come from a legitimate Instagram address, such as “security@mail.instagram.com,” with the subject line “Reset your password.” The body of the email says, “We got a request to reset your Instagram password,” with a blue “Reset password” button below.

If you received a similar password reset email from Instagram and want to verify whether it’s legitimate, it only takes a couple of minutes to check. Do not click any links in the email until you have taken the following steps.

Anytime Instagram sends you an email, they log it in your Instagram account, where it is stored for 14 days. Here’s how to locate that log:

1. From your profile page, click the three horizontal lines in the upper-right corner.
2. Click on “Accounts Center.”
3. Under “Account settings,” click “Passwords & Security.”
4. Under the section titled “Security checks,” click “Recent emails.”
5. If you have more than one account, select the one you want to check.
6. You will then be prompted to enter the password for the account you are checking.
7. On the next screen, “Emails from Instagram,” under the “Security” tab, you can view any emails Instagram has sent you in the past 14 days. If the log is empty, or if the emails listed don’t match the one you received, it is very likely a scam.

If the password reset email you received is older than 14 days, it is best to ignore it and/or delete it, as you cannot verify it using the steps above.

As with any suspicious emails you may encounter, it is always best practice to confirm legitimacy before clicking any buttons or links.