Meta AI Support Chatbot Exploited by Hackers, Instagram Accounts Reportedly at Risk
Islamabad: A security feature introduced by Meta to help users recover locked Facebook and Instagram accounts has reportedly become a potential tool for cybercriminals, raising concerns about the safety of user accounts.
The AI-powered support chatbot, launched by Meta in December 2025 to streamline account recovery, is now under scrutiny after security researchers claimed that hackers have found ways to exploit the system to gain unauthorized access to Instagram accounts.
According to reports, the vulnerability may allow attackers to take control of certain Instagram accounts by manipulating the AI chatbot into changing the email address linked to a targeted account. Once the email address is altered, hackers can allegedly reset the password and seize control of the account, in some cases bypassing two-factor authentication protections.
Security experts on X (formerly Twitter) have shared screenshots, videos, and technical details of the alleged exploit. Discussions regarding the vulnerability have reportedly been circulating on Telegram since March, but concerns intensified after evidence emerged suggesting the flaw was being actively used.
Meta spokesperson Andy Stone confirmed that the company is investigating the issue and working on a fix. The company is also reviewing reports of affected accounts, although it has not disclosed how the vulnerability originated.
Preliminary findings suggest that attackers may have discovered a way to exploit the chatbot’s support activation process, which appears to rely in part on a user’s geographic location. By using virtual private networks (VPNs) to mimic a victim’s location, hackers may have been able to mislead the system and gain access to account recovery functions.
The total number of affected accounts remains unclear. However, reports claim that several high-profile accounts may have been targeted, including an Instagram account associated with former U.S. President Barack Obama during his time in the White House.
Meta has not yet released detailed information about the scope of the issue but says efforts are underway to strengthen security measures and protect users from potential abuse of the AI-powered recovery
system.
