Is this really Instoly?

Last updated: August 24, 2026

Four things we will never do

If any of these happens, it is not us. Stop, and email contact@instoly.com from the address on your Instoly account.

  • We never ask for your Instagram password. Connecting Instagram happens on instagram.com, through Meta's own login screen. We never see it and we never need it.
  • We never ask for a one-time code. Not over WhatsApp, not over email, not on a call. A code we sent you is for you to use, not to read out.
  • We never ask for card details over chat. Every payment happens on Razorpay's checkout, opened from inside your dashboard.
  • We never DM you asking for money. We do not sell plans over Instagram DM, WhatsApp or a phone call.

Checking a link

Every genuine Instoly page is on instoly.com or a subdomain of it — for example brands.instoly.com. Look at the text immediately before the first single slash:

  • Genuine: https://instoly.com/dashboard, https://brands.instoly.com
  • Not us: instoly.com.login-verify.app, instoly-support.in, ínstoly.com

The middle one is the trick that catches people: everything before the last dot is just a label. The real domain is the bit at the end.

Short links we generate for your DMs start with instoly.com/r/. Anything else is not one of ours.

Checking a message

We contact you in exactly three ways:

  • Inside the dashboard — notifications on instoly.com.
  • Email from an @instoly.com address.
  • WhatsApp, only if you turned it on, and only from our verified WhatsApp Business number. Those messages carry a green "verified business" tick in WhatsApp.

We do not use SMS, we do not call about your account, and we do not have agents on Telegram.

Our official presence

If you are looking at something that claims to be Instoly and is not on this list, treat it as someone else.

What we are verified for

Instoly connects to Instagram through Meta's official Instagram API with Instagram Login. That access is not something an app can grant itself — Meta reviews it, and it requires:

  • Business verification with Meta — our legal entity, registration and address checked against documents.
  • App review for each permission, including the ability to read comments on your posts and send DMs on your behalf. Each was submitted with a recorded demonstration and approved individually.
  • Ongoing compliance with Meta's Platform Terms and Developer Policies. Breaking them removes the access, which is why we refuse automation patterns that would put it at risk.

You can see exactly what you granted us, and remove it at any moment, in Instagram under Settings → Website permissions → Apps and websites. Nothing we do survives you revoking it there.

Payments

Payments are processed by Razorpay, an RBI-authorised payment aggregator. Card numbers, UPI ids and bank credentials are entered on Razorpay's checkout and never reach our servers. We store the payment reference, the amount and the plan — enough to show you a receipt, and nothing that could be used to charge you.

A recurring plan uses an RBI-compliant e-mandate. You will be notified before each debit and you can stop it from your dashboard at any time. See the Refund & Cancellation Policy.

Report an impersonator

If someone is using our name, send us the profile link, the message and a screenshot at contact@instoly.com. It genuinely helps — most takedowns start with a creator forwarding something.