How to transfer an Instagram account safely

Short answer: the transfer is only complete when the seller loses every way back into the account — and that means removing recovery emails and phone numbers, ending active sessions, unlinking Facebook and Google accounts, and resetting two-factor authentication. As long as any one of those links stays in the seller's name, the account is still theirs in practice, even if the money has already changed hands.

\n\n

The short version

\n

• Order matters: clear the recovery options first, release payment afterward. Flipping that order is the mistake that costs you the whole account.
• Changing the password transfers nothing. Whoever holds the recovery email holds the account.
• Active sessions on other devices stay logged in even after a password change, unless you end them.
• Facebook and Google links are the most overlooked back door in the whole process.
• Changing everything on day one — name, niche, country you log in from, a flood of posts — is the behavior that draws the most attention from the platform.

\n\n

First things first: the honest warning

\n\n

Transferring an Instagram account goes against Meta's Terms of Use. The terms explicitly prohibit transferring an account without written permission, and Meta's spam policy lists selling, buying or trading accounts among its banned practices. It isn't illegal — there's no Brazilian law against it — but it is a breach of contract, and the possible consequence is account termination.

\n\n

In practice, termination over a transfer is uncommon when the account keeps running normally. What raises a flag is changing everything abruptly and all at once. We'll come back to this at the end, because it determines what you should do in the first 30 days.

\n\n

Anyone telling you there's "no risk at all" is selling you something. You'll find the full picture in the guide to buying and selling social media accounts.

\n\n

The process, in the right order

\n\n

Step 1 — Verification, before any payment

\n

1. Video call with a shared screen. No exceptions.
2. The seller opens Settings → Accounts Center and shows the registered emails and phone numbers.
3. They open Insights and browse the last 30 and 90 days live.
4. They show the account status: restrictions, warnings, limited reach.

\n

If anything here doesn't match the listing, the deal stops. The fraud patterns are covered in 11 signs of a scam when buying an account.

\n\n

Step 2 — Payment

\n

Agree with the seller on when payment happens: only after the verification in Step 1, never before. That order is what keeps the next steps negotiable — if you pay everything upfront, the seller has no incentive to finish the cleanup, and you have no way to demand anything afterward.

\n\n

Step 3 — The cleanup (the step that actually transfers the account)

\n\n

Do all of this with the seller on the call, in the same session, in the order below:

\n\n

1. Change the primary email to one of yours, created just for this. Confirm the verification code in your inbox.
2. Remove every secondary and old email. This is the critical point — it's how an account gets recovered later.
3. Change the registered phone number to yours and remove the old one.
4. Unlink Facebook and Google. Accounts Center → linked accounts. An account tied to the seller's Facebook can be recovered even after the email and password are changed.
5. Turn off the old 2FA and set up your own, using your authenticator app. Generate and store new backup codes — and confirm the old ones are invalidated.
6. Change the password — now, to a new, strong one that's yours.
7. End every active session. Settings → Accounts Center → Password and security → Where you're logged in. Remove every device that isn't yours. Without this, the seller's phone stays logged in.
8. Review third-party apps with access to the account and remove anything you don't recognize.
9. Check Meta's security emails (Settings → Emails from Instagram) to see whether any change was made without you noticing.

\n\n

Step 4 — Quarantine before releasing payment

\n

Don't release it right away. Wait 24 to 72 hours with the account under your control, and during that time:

\n

• Confirm that no recovery request has come in.
• Check again that no old email or phone number has reappeared.
• Make sure no new session has shown up.

\n

Only then release the payment. An honest seller understands and accepts it — it's a short wait and they already know the money is held in their favor.

\n\n

The checklist to run through

\n\n\n\n

The first 30 days

\n\n

This part is what separates a successful transfer from an account taken down two weeks later.

\n\n

The platform doesn't monitor "account selling" — it monitors unusual behavior. And changing everything at once is unusual. So:

\n\n

• Don't change the @ on day one. If you need to, wait a few weeks and do it in a single move.
• Keep the same posting frequency and format for a few weeks. Make changes gradually.
• Don't switch niches all at once. A cooking profile that turns into a finance profile overnight loses reach and raises red flags.
• Avoid changing your access country abruptly. If possible, stick to the same region for a while.
• Don't fire off an avalanche of posts on day one.
• Don't buy engagement to "warm it back up". A freshly transferred audience with an artificial follower spike is exactly the combo that triggers review, since buying engagement is an express violation of Meta's spam policy. If the plan is to speed up growth, do it after the stabilization period and with a service applied strategically, not with a spike in the first week.

\n\n

What this means in practice

\n\n

Transferring an account is a security process, not a password swap. The money is almost always lost at the same point: someone releases payment before clearing the recovery paths. If you follow just one rule from this article, make it this one — clean recovery first, a 24 to 72 hour quarantine, payment released last.

\n\n

And once everything is transferred, remember the account is still in a natural observation period. The first 30 days call for continuity, not reinvention.

\n\n

To work out whether the price you're paying makes sense, see how much an Instagram account is worth. The conditions for using our platform are in our terms of use.

\n\n

Frequently asked questions

\n\n

Is changing the password enough to transfer an account?

\n

No. Whoever still has the recovery email or phone number on file can take the account back even after the password is changed. A real transfer only happens when every old recovery path is removed.

\n\n

How long should I wait before releasing payment?

\n

After completing the entire cleanup and waiting 24 to 72 hours with the account under your control, confirming that no recovery request was made and no old data reappeared.

\n\n

Can the seller recover the account later?

\n

If any old email, phone number, Facebook or Google link, active session or backup code remains, then yes — and Meta's cybersecurity policy treats that later access as unauthorized access, which doesn't undo the damage. If all of them are removed and replaced with yours, the recovery path simply stops existing.

\n\n

Is transferring an Instagram account against the rules?

\n

It goes against Meta's Terms of Use, which prohibit transferring an account without written permission. It isn't illegal under Brazilian law, but the platform can shut the account down if it detects the transaction.

\n\n

Can I change the username right after buying?

\n

You can, but it's not recommended on day one. Abrupt, simultaneous changes to name, niche and access region are the behavior pattern most likely to trigger a review. Wait a few weeks and make one change at a time.

\n\n

What if the account is linked to the seller's Facebook?

\n

Unlinking during the transfer is mandatory. An account still tied to the seller's Facebook allows recovery even after the email, phone and password have been changed — it's one of the most overlooked back doors in the whole process.

\n