Instagram Verification: How a Paid Badge Hid an $8M Scam

Here's a fact that should make you a little uneasy: the blue checkmark next to someone's name on Instagram used to mean platform staff reviewed whether an account was authentic. Today, in most cases, it means someone entered a credit card number. That single change makes it easier to mistake a paid badge for proof of trustworthiness, the same kind of misplaced trust that let a man named Jebara Igbara steal at least $8 million from people who believed his online persona.

Igbara, who went by "Jay Mazini" online, built a following by posting videos of himself handing cash to strangers on the street, dressed like a wealthy, generous investor with deep ties to his religious community. People believed him. Some of them were his own neighbors. He used that trust to run investment schemes and currency exchanges that, according to the U.S. Attorney's Office for the Eastern District of New York, drained at least $8 million from his followers before he was sentenced to seven years in prison and ordered to forfeit $10 million. Read that sentence again: seven years for stealing eight million dollars from people who thought they were talking to a legitimate, checked, trustworthy person.

What instagram verification actually checks (and what it doesn't)

Let's back up and talk about what the badge is supposed to do, because most people never learned this and just absorbed a vague sense that "verified equals safe." When Instagram verification first became a thing, around 2009 on sister platform Twitter and later formalized across Meta's apps, the whole point was to stop impersonators. If you were a real public figure, a real journalist, a real business, the platform's staff would manually review your accounts, confirm your identity, and slap a badge on the real one so nobody confused you with a fake. That system relied on actual human review. It was slow, it was selective, and it meant something.

Then platforms shifted toward paid verification service models, and the whole logic flipped. Instead of "we checked you, here's your badge," it became "you paid us, here's your badge, and by the way we still ask for some proof." That "still ask for some proof" part is where things get murky, and it's exactly where the Mazini-style scams live.

How the instagram verification process actually works today

If you go looking for it yourself, here's the honest walkthrough. Open Instagram, tap your profile, go into settings, and look for the accounts center or a dedicated tab for verification (Meta has shuffled this around, so sometimes it's under a "Meta Verified" section, sometimes buried in account settings). You'll find a form asking you to confirm your instagram username, upload a copy of your government id, and record a video selfie where you turn your head and blink so a system can compare your face to your ID photo. There's usually a search function to check your account against existing profiles first, because Meta doesn't want to verify two competing accounts claiming the same identity. After submitting that information, you wait, sometimes get asked answering security questions, and eventually get a decision.

It may sound thorough, but here's the catch, and it's the part almost nobody clocks: this verification process confirms that the person filling out the form owns a valid ID and that their face roughly matches it. It does not confirm that person is trustworthy, financially honest, or telling the truth about being a wealthy investor. It confirms identity, not integrity. Those are two completely different things, and the badge has always only ever promised the first one, even back when the review was done entirely by hand. This article is part of a series, start with Deepfake Ai One Public Photo Is All Blackmailers Need.

Why instagram verification badges attract impersonator profiles

This is the part that genuinely surprised me when I dug into it. You would think making verification harder to fake would reduce fraud. Instead, researchers found something close to the opposite happens once a badge becomes purchasable. According to research published through the University of Hawaii's academic archive, when the cost of getting verified drops low enough, both real creators and scammers rush to buy the badge, and in some cases the badge actually helps impersonator profiles look more convincing than the genuine account, because regular users assume nobody who's "verified" would lie to them.

Think about that for a second. The badge was built to be a filter. It has quietly become a tool. A scammer building a fake financial advisor persona doesn't see verification as a hurdle anymore. They see it as a marketing expense, one more prop, right alongside the expensive watch and the staged cash-giveaway videos, that makes the whole performance land harder.

"Government ID submission should theoretically prevent fraud, yet verified fraudulent accounts persist across multiple platforms."

analysis based on findings reported by IDScan

Security researchers at ZeroFox have flagged something else worth sitting with: financial services accounts, meaning anything that smells like investing, trading, or money advice, get impersonated more than almost any other category, because trust IS the entire product being sold. An impersonator with a checkmark and a convincing pitch doesn't need to hack anything. They just need you to believe them for about ninety seconds, long enough to send a wire transfer.

Instagram verification versus two-factor authentication: what's the difference?

People mix these up constantly, so let's untangle it plainly. Two-factor authentication protects YOUR account from being hijacked by requiring a second log in step, usually a code sent to another device like your phone, on top of your password. It's a lock on your own front door. Instagram verification, the blue badge, is a claim about someone ELSE's identity, telling you "this account belongs to who it says it belongs to." One protects you. The other is supposed to help you judge a stranger. Confusing the two is exactly how scams like Mazini's work, because people assume a badge implies the same kind of security check that two-factor authentication gives their own instagram account.

The comparison nobody explains: old verification versus new verification

Here's where the shift becomes obvious once you see it laid out side by side. This isn't a small design tweak. It's a completely different meaning attached to the exact same little blue checkmark.

Look at that middle row again. The badge went from meaning "this is the real, notable person" to meaning "this person completed a form." Those sound similar if you're skimming your phone at 11pm. They are not the same claim at all, and the entire Mazini case sits inside that gap. Previously in this series: Ai Deepfake Scam News Today Fake Video Call Costs Bank 95m.

How to check verified instagram accounts before you trust them

Because Igbara-style fraud doesn't require anyone to hack the verification system, it just requires you to misunderstand what the badge means, the real defense is behavioral, not technical. Before you send money, invest, or hand over personal details to anyone claiming to be a verified instagram figure, do a little of your own homework. Pull up their profile, check how long the account has existed, and use the platform's search to see if there's a second account using nearly the same name (a classic sign of an impersonator profile riding on a real person's reputation). Look at the comments section under recent posts, not the polished caption, because real followers who've been scammed tend to leave warnings there before they get deleted.

If you ever want to request verification yourself, know that am i able to get verified depends heavily on whether you can prove you're a real, notable, searched-for presence, not just an active poster. And if a stranger asks you to move money based on their facebook or Instagram presence alone, treat the badge as decoration, not proof.

Why does this misconception about verification persist?

Here's the thing, and I say this with real sympathy: you're not dumb for assuming a checkmark means "checked." For thirteen years, from roughly 2009 to 2022, that's exactly what it meant. That's a long time for a symbol to mean one thing before quietly meaning something else. Platforms didn't announce "hey, we changed what this means now, please recalibrate your trust." The little blue badge looks identical to how it always looked. Nobody redesigned it to signal "caution, subscription-based." Your brain, reasonably, kept using the old rulebook because the visual cue never changed. That's not a personal failing. That's a design failure most people never got the memo on.

Think of it like a hologram sticker on cash. A real security hologram used to mean "this bill passed inspection." But if a counterfeiter can simply buy that same hologram and stick it on fake currency, the hologram stops proving anything about the bill. It only proves someone paid for the sticker. That's precisely what happened to the checkmark. It didn't get worse at its job. Its job got replaced underneath it, silently.

This is exactly the kind of gap facial comparison technology was built to close, not by asking "did someone verify this account," but by directly answering "does this face actually match the identity being claimed." That's a fundamentally different question than a badge can ever answer, because a badge is a one-time checkbox and a face is a fact that either matches or doesn't, every single time you look.

Here's the aha moment worth carrying with you: the badge used to mean a person was checked. Now it mostly means they paid. Jay Mazini's followers weren't fooled by fake technology or a hacked account. They were fooled by a symbol that still looked like the old promise while quietly making a new, much smaller one. If this were happening to you tonight, a stranger with a checkmark asking for money, would you know where to look first? Now you do: not at the badge, but at everything around it. Up next: Instagram Verification How A Paid Badge Hid An 8m Scam.

Instagram Verification: Frequently Asked Questions