Someone tried something similar with me on Instagram. They didn't hack anything, though. They just duplicated the account and added an extra letter to the account name. They followed me and I thought it was weird I wasn't following so followed. Then, they started talking to me via private message and it quickly became clear they were not who they said they were so I went looking for the original account and sure enough…she was still there and had no idea what was going on. The account was killed. That's one thing Instagram seems very good about—killing fraudulent/spammy accounts soon after they're reported. I wish they'd kill them before we have to report but still…