On this page
what "blocked domain" actually means
Instagram operates two distinct link-restriction mechanisms:
- The "This link may be unsafe" warning — a soft warning that appears before navigation, which users can click through. Most users don't.
- Hard domain blocking — the link is rejected entirely. You can't add it to your bio, post it in a story, or DM it. Instagram shows "Couldn't add link" or silently strips it.
This page covers the second case — domains that Instagram refuses to accept at all. For the warning case, see /guides/this-link-may-be-unsafe-instagram.
known blocked domain categories
Instagram does not publish a block list. The categories below are observed from creator reports and publicly-discussed enforcement actions.
| Category | Likely blocked | Notes |
|---|---|---|
| Known phishing / malware domains | Yes | Drawn from Google Safe Browsing, Meta's own blocklists |
| Domains impersonating Meta or Facebook | Yes | Anything that looks like login.facebook-something.com |
| Specific URL shorteners with high abuse history | Sometimes | Some bit.ly variants, some tinyurl variants depending on era |
| Adult content domains (not partnered) | Yes | OnlyFans direct links — often blocked; mass-market adult sites generally |
| Pirated content domains | Yes | Torrent indexes, free-movie sites, leaked-content distributors |
| Pharmaceuticals (non-partnered) | Yes | Unauthorized drug-sale sites |
| Restricted goods (weapons, tobacco) | Often | Depends on jurisdiction |
| Gambling (in restricted markets) | Often | Geo-dependent |
| Sex work platforms | Yes-mostly | OnlyFans, Fansly, sex-work-aggregator domains commonly blocked |
| Cryptocurrency scam domains | Yes | Domains flagged by community reports |
| Recently-registered domains with no traffic history | Sometimes | Heuristic-based |
The OnlyFans / sex-work blocking is the single most common creator complaint. The block is structurally inconsistent — sometimes the link works for some accounts but not others, sometimes it works in DMs but not bio, sometimes it changes month-to-month.
diagnose: is your domain hard-blocked
Test the bio link
- Try to add
yourdomain.comto your bio. - If Instagram says "Couldn't add link" or strips the URL: hard block.
- If Instagram accepts it without complaint: not hard-blocked.
Test stories
- Add a link sticker to a story with your domain.
- If the link sticker shows but tapping it from another account triggers the unsafe-link warning: soft warning, see /guides/this-link-may-be-unsafe-instagram.
- If you can't add the link sticker at all: hard block.
Test DMs
- Send your URL to yourself in a DM.
- If the message goes through with a clickable link: not hard-blocked in DMs.
- If the message is stripped or rejected: hard block.
Different surfaces (bio, story, DM) have different enforcement layers. A domain hard-blocked in bio may still work in DMs, and vice versa.
what to do if hard-blocked
Once you've confirmed hard block, you have three realistic paths.
Path 1: change destination domain
Move the destination to a different domain. This is the most reliable path.
- A new domain registered specifically for Instagram traffic.
- A link-in-bio service domain (Linktree, Beacons, or similar) that hosts a landing page with your eventual destination as one option.
- An aggregator-style page on a creator-platform domain.
Trade-off: you give up direct branding of the link.
Path 2: appeal the block
If you believe the block is in error:
- Submit feedback via Instagram's Help Center.
- If you operate a business account, submit a Business Verification request — verified businesses sometimes get block removal.
- For specific URL claims (e.g., your domain looks like a phishing target but isn't), submit a Google Safe Browsing re-review request.
Appeals succeed inconsistently. Plan for "no" as the default outcome.
Path 3: route through an intermediary
Use a link-in-bio service that hosts an interstitial page, then redirects to your destination. Instagram tracks the link-in-bio service's domain (which is trusted), not your destination domain.
- Linktree, Beacons, Stan, Carrd, Bento — mainstream link-in-bio services.
- Specialty creator-targeted services with policies more friendly to specific verticals.
Trade-off: an extra click for users, slight conversion drop.
category-specific notes
OnlyFans and sex work
Direct OnlyFans links are commonly blocked. The OnlyFans-friendly link-in-bio ecosystem exists specifically to route around this: services that host an interstitial page with adult-content age-verification, then redirect to OnlyFans.
Whether this is "allowed" is genuinely unclear. Instagram's enforcement of sex-work-adjacent linking is inconsistent — some accounts get away with direct OF links for years, others get blocked immediately.
Cryptocurrency
Cryptocurrency-promotion domains are heavily restricted. Even legitimate crypto projects often see linking restrictions. Workarounds:
- Use a known-good link-in-bio service rather than direct linking.
- Verify the destination via Meta's Meta Verified for Business program (paid, limited capacity).
Affiliate links
Direct affiliate links to Amazon, ClickBank, or other affiliate networks sometimes get flagged due to redirect chains. Cleaner alternatives:
- Use a single-hop redirect from a domain you own.
- Use a link-in-bio service that hosts the destination.
- Use Instagram's native affiliate-program tools where eligible.
the structural reality
Instagram's domain blocking is opaque, inconsistent, and reflects Meta's risk-management posture more than any explicit content policy. The same domain may be blocked for one user and unblocked for another. The block may decay over months or persist indefinitely.
For creators in categories where blocking is common (sex work, adult-adjacent, cryptocurrency, certain health/supplements), the structural reality is:
- Direct linking will be unreliable.
- Link-in-bio intermediaries are the working pattern.
- Some flags are unavoidable regardless of practice.
Adjacent reading: /guides/how-to-avoid-instagram-bans covers the broader prevention pattern. /guides/this-link-may-be-unsafe-instagram covers the soft-warning case.
what about the in-app browser
Even when a domain isn't blocked, links opened from inside Instagram's in-app browser have a separate failure pattern — users arrive logged out, sessions don't persist. That's a different problem from blocking; it's the in-app webview cookie isolation. For shadowban-specific suppression that affects link visibility differently: /instagram-shadowban and /guides/am-i-shadowbanned.
related reading
- The warning case (soft block): /guides/this-link-may-be-unsafe-instagram
- Broader ban-avoidance: /guides/how-to-avoid-instagram-bans
- Shadowban diagnostic: /guides/am-i-shadowbanned
- Pillar: /instagram-shadowban
- Tools: /tools/instagram-shadowban-checker
For creators routing around platform link restrictions with branded short-link infrastructure, the linkboo /pricing tiers are designed for this: /pricing.
references
- Google Safe Browsing Transparency Report
- Meta Community Standards
- Instagram Help Center — Blocked links
- Meta Business Help Center — Verified businesses