Reduce scam message requests on Instagram without missing real contacts

Instagram separates first messages from people you do not follow from established chats. Meta's Hidden Words tool can move offensive or scam-like requests into a hidden area, and Limits can reduce a sudden flood of unwanted contact. Filtering lowers exposure; it does not verify that every message left in your inbox is safe. A legitimate customer or acquaintance can also be filtered by mistake, so choose a review routine that fits your use of the account.

Before you start​

Decide whether the account is personal, a creator account or a business contact point. If customers use DMs, designate a periodic review of filtered requests. Never accept an unknown request merely to inspect a link or attachment. Keep evidence of threatening messages before blocking if it might be needed for a report.

Do it step by step​

1. In Instagram settings, find Hidden Words or the message-request controls. Review whether offensive and spam-like requests are filtered and whether your own custom list of words is enabled. Labels and availability can vary by region and account type.
2. Add a short custom list only for repeated unwanted phrases, phone numbers or impersonation claims you actually see. Avoid broad words such as 'order' or 'help' if real contacts use them. Test with a harmless phrase from another account if you can do so without exposing personal data.
3. Choose who may send message requests in the message controls. For a personal account, stricter settings may be reasonable; for a public business account, consider the cost of excluding first-time customers. Restricting requests is different from blocking an existing follower.
4. During a coordinated wave, inspect Limits if offered. Check which groups are affected and how long the limit lasts. This is a temporary interaction control, not a permanent account-security fix.
5. Open the hidden or spam request queue periodically without following links. Look for a legitimate sender, verify them by another route where possible, then accept, delete or report each request deliberately. Report threats and impersonation before deleting evidence.
6. Review the visible inbox and filtered queue again after a week. Refine custom words that caught real messages. If a sender already has a chat with you, use Restrict, Block or Report as appropriate; hidden-request settings may not move established chats.

Check the result​

Scam requests are routed out of the main inbox while a sample of expected first-time contacts still reaches an appropriate queue. You know where to inspect filtered messages and how often to do it.

If something goes wrong​

If a legitimate message disappears, check hidden or spam requests before assuming it was never sent. A creator or teen account may have different defaults. If the options are absent, update the app and consult the current Meta help path rather than using a third-party filtering tool that asks for your login.

Know the limit​

Filtering is a workload tool, not proof that messages in the main inbox are genuine. Attackers can change spelling, use images or compromise an existing contact. Meta also changes the available request controls over time; recheck them after major app updates. Meta Hidden Words and Limits Meta account safety