Instagram wants your ID to recover your account
Real account recovery does ask for a document. The trick is telling it from the people who copy it.
Short answer
- Start it from the app or the official help page — never from a link, a DM or an account offering recovery services.
- Recovery matches a name and a face. Cover the number, MRZ and signature; those play no part in it.
- Anyone offering to recover your account for a fee is running the second scam on the person who just lost the first one.
- Watermark it “for [platform] account recovery, [date]” — you are sending it into a support queue, not to one person.
Your account is gone. The email on it has been changed, the phone number too, and the only route left in the help pages ends with: “Upload a photo of your identity document.”
This one is genuinely real, which makes it unusual on this site — and makes the fake version unusually effective.
Why recovery is the exception
Most of the requests in these guides come from someone who could have asked for less. Account recovery is different: when a takeover has replaced every other proof you had, an identity document is one of the few remaining ways to show that the account is yours. The platform is not being lazy. It is out of options.
So the question is not whether to send one. It is which flow you are in.
The one rule: you start it
| Real recovery | The fake |
|---|---|
| You open the app or type the help URL yourself | It reaches you — DM, email, comment |
| Runs on the platform’s own domain | A lookalike domain or a form service |
| Free | A fee, often in crypto or gift cards |
| No human negotiates with you | Someone very helpful, very fast |
| Asks once, through the form | Asks again, then for more |
Everything that arrives at you is the scam. That includes the accounts that appear in your replies within minutes of you posting that you have been hacked — they are watching for exactly that post, and they are offering the second robbery to the person who has just had the first.
What to send
Recovery compares a name and a face against the account. That is all it does with the document, so:
- Cover the document number.
- Cover the machine-readable zone.
- Cover your signature.
- Keep your name and photo visible.
- Watermark it “For [platform] account recovery — [date]”.
The watermark earns its place here more than almost anywhere: this goes into a support queue, is seen by people you will never identify, and may be retained under a policy you have not read. A copy that names its single purpose cannot be quietly reused. Anonymize my ID prepares it on your phone with no upload.
This is squarely on the redaction side of the line drawn in when redacting your ID won’t work — a support desk has no statutory duty to capture a complete document.
Do the rest of the recovery too
The document is one step. The rest matters more:
- Secure the email account first. It is the key to everything else, and it is usually taken before the social account is.
- Turn on an authenticator app, not SMS, wherever it is offered.
- Check what else used that account to log in — every “sign in with” connection is a second door.
- Tell your contacts, because a taken-over account’s next job is messaging them.
If a full copy of your document went out during any of this, work through you already sent an unredacted ID copy, and see can someone steal your identity from an ID photo? for what that actually exposes.
Frequently asked questions
Does Instagram really ask for ID to recover an account?
Yes, for some recovery paths — when an account has been taken over and the email and phone number have been changed, a document is one of the few remaining ways to establish who the account belongs to. That makes it an unusually convincing thing for a scammer to imitate, which is why the channel matters more than the document here.
How do I tell the real recovery flow from a fake one?
You started it. Open the app or type the platform's help address by hand and begin recovery from there. Anything that reaches you first — a DM, an email with a link, a comment from an account promising to restore your profile — is the fake one, without exception.
Can I redact the copy I send for account recovery?
Yes. Recovery is comparing a name and a face against an account, not running a regulated identity check, so cover the document number, the machine-readable zone and your signature. Leave your name and photo visible, and add a watermark naming the platform and the date.
Someone messaged offering to get my account back. Should I pay them?
No. Account-recovery services that approach you are running a second scam on someone who has just been robbed. They take a fee, or a document, or both, and they have no more access to the platform's systems than you do. Recovery is free and runs through the platform.
What if the platform has no recovery option that works?
Then the answer is still not a stranger with a document. Exhaust the platform's own routes, use any business or partner support channel you have access to, and secure everything the lost account could reach — email first, then anything that used it to log in.