You keep getting Instagram password reset emails because someone or something is repeatedly submitting your username, email, or phone number into Instagram’s “Forgot password” form, which automatically triggers those emails even if you did not request them yourself. In most cases your account is not actually hacked yet, but it is being targeted or probed, so you should treat it as a security warning and lock things down.

Main reasons this happens

  • Random bots hitting the reset form
    Automated scripts often cycle through lists of real Instagram usernames and trigger password reset emails as part of credential‑stuffing or takeover attempts. If your handle is common or was scraped somewhere, it can get spammed a lot.
  • Someone trying to steal your username
    On forums, many users report waves of reset emails when someone wants their @handle and is testing ways to access the account. This can go on for days or weeks without any successful login.
  • Old or leaked credentials in circulation
    If your email or password was in a past data breach on another site, attackers may be trying those combos on Instagram and spamming resets when they fail. The emails are a side‑effect of that automated activity.
  • Legit login confusion by someone else
    Occasionally, another user with a similar email/username keeps typo‑entering your details and unknowingly sends you resets. This is less common but still possible.

How to check if your account is compromised

  • Look at Instagram login activity
    In your account’s security settings, review “Login activity” and check for unknown devices, locations, or times. If anything looks off, treat it as a potential compromise.
  • Verify no unexpected changes
    Confirm your email, phone number, username, and linked accounts (like Facebook) are all still yours and unchanged. Also look for DMs or posts you did not send.
  • Watch for actual login alerts
    Separate from reset emails, Instagram may send “new login” or “suspicious login” notices if someone gets in. If you see those and it wasn’t you, act immediately.

What you should do right now

  • Change your password to a strong, unique one
    Use a long, random password you do not use anywhere else. A password manager is the easiest way to generate and store this.
  • Turn on two‑factor authentication (2FA)
    Enable 2FA via an authenticator app (preferred) or SMS so logins require a time‑based code in addition to your password. This alone blocks most takeover attempts even if someone guesses your password.
  • Secure your email account too
    Since password reset links go to your email, protect that mailbox with its own strong password and 2FA. If your email is weak, your Instagram can be taken over through it.
  • Do not click links in suspicious emails
    Make sure the sender is a real Instagram domain (like @mail.instagram.com) and the link goes to an official Instagram or Meta domain. When in doubt, ignore the email and go directly to the app or site.

How to reduce or stop the reset emails

  • Use the “Didn’t request this?” / “Secure your account” link when present
    Some official emails include a link that lets you tell Instagram the request was not made by you, which can help limit further login help emails.
  • Adjust email notifications in Instagram settings
    Inside the app, go to email/SMS settings and reduce non‑essential security emails while keeping critical alerts on. This can cut down noise without sacrificing safety.
  • Create filters in your email client
    Many users set a rule to auto‑archive or mark as read messages that match specific subject lines like “reset your Instagram password,” while still leaving them accessible if needed later. Do this only after you are confident your account and email are fully secured.
  • Consider changing your email on the Instagram account
    Some people switch to a more private, hard‑to‑guess email address just for Instagram login, which can reduce targeted attacks and some automated abuse.

When to really worry and seek help

  • If you see successful logins you do not recognize
    Unknown devices or locations in “Login activity” mean someone may already be in; log out of all devices and change your password plus 2FA immediately.
  • If your recovery email or phone number changes without you
    That is a strong sign of takeover or an attempt in progress, and you should use Instagram’s account recovery flow right away.
  • If you are fully locked out
    Use Instagram’s account recovery options, including “Need more help?” on the login screen, and follow the identity verification steps described in user reports and help walkthroughs.

TL;DR: You keep getting Instagram password reset emails because bots or other users are repeatedly submitting your account to the reset form, effectively “knocking on the door” of your profile. Lock down your password, turn on 2FA, secure your email, and treat the emails as warning signals rather than ignoring them completely.