Instagram users locked out after Meta AI abused to steal accounts

Multiple Instagram users — including high-value and notable accounts — had their accounts hijacked after attackers convinced Meta’s AI-powered support tools they were the legitimate owners by uploading AI-generated animated selfies (deepfake-style) and using VPNs to pass geolocation checks, allowing attackers to change recovery emails and bypass 2FA; victims reported being stuck in AI-only recovery loops with no human escalation, and Meta stated impacted accounts were being secured.