---
title: "The Polite Account Takeover - “Just link my new email address” - 2026 AI Darwin Award"
url: https://daily.dev/posts/the-polite-account-takeover---just-link-my-new-email-address---2026-ai-darwin-award-3fkafh1te
source_url: https://aidarwinawards.org/nominees/meta-ai-instagram-hack.html
type: article
source: "AI Darwin Awards"
published: 2026-06-13T23:42:39.028Z
updated: 2026-06-13T23:42:59.830Z
tags: ["security", "llm", "ai-security"]
reading_time: 2
upvotes: 1
comments: 1
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# The Polite Account Takeover - “Just link my new email address” - 2026 AI Darwin Award

**[AI Darwin Awards](https://daily.dev/sources/aidarwinawards)** · 2 min read · 1 upvotes · 1 comments

## Summary

Meta replaced human customer support with an AI assistant for Instagram account recovery, granting it administrative powers to reset passwords and change linked email addresses. Hackers exploited the AI's inability to verify identity by simply asking it to link their own email to target accounts, compromising over 20,000 accounts including the Obama White House and US Space Force Instagram pages. Meta claimed the AI 'worked as intended,' blaming a separate identity verification bug. The incident illustrates the dangers of granting LLMs unchecked administrative authority without identity verification or human oversight — a textbook confused deputy problem enabling trivial social engineering at scale.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://aidarwinawards.org/nominees/meta-ai-instagram-hack.html>

## Community discussion

Top comments from developers on daily.dev.

**@randy** · 0 upvotes

> As our CEO is fond of saying…
>
>
> > Just because you can, doesn’t mean you should.
>
>
> Best practices exist for a reason.

---

Tags: [#security](https://daily.dev/tags/security), [#llm](https://daily.dev/tags/llm), [#ai-security](https://daily.dev/tags/ai-security)

[View this post on daily.dev](https://daily.dev/posts/the-polite-account-takeover---just-link-my-new-email-address---2026-ai-darwin-award-3fkafh1te)