For anyone seeing this after 2025. Facebook announced the depreciation of Instagram's basic display API more on this link. So we must use the new Instagram API with Instagram Login API: Use that to set up a custom Instagram account for testing and generate an access token: Somebody else is using my email address to login to Instagram.

Understanding the Context

How do I stop them from doing that? Somebody else is logging on Instagram with my email address and I don't know that person. I want to make sure that I am the only one who can do anything with my account. How do I stop them from using my account for logging on any applications?

Key Insights

I'm trying to perform social login via Instagram without Graph API and read all the necessary stuff related to it from the Instagram documentation and StackOverflow. Following are the things I have done in my project till now: Login developer account of Instagram via my username password. I have updated my email account in my instagram account and someone hacked my instagram and I'm trying to login it, it shows my previous email which I no longer have access to. So, how can I login back to my account?? Status code of 429 means that you've bombarded Instagram's server too many times ,and that is why Instagram has blocked your ip.

Final Thoughts

This is done mainly to prevent from DDOS attacks. Best thing would be to try after some time ( there might be a Retry-After header in the response). Also, increase the time interval between each request and set the specific count of number of requests made within a specified time (let's say 1 hr).