You paste your link, tap Done, and Instagram throws it back at you: “Link not allowed”, or “We restrict certain activity to protect our community”. Or the link goes through, but nobody can open it in DMs. It is stressful, especially if that link is how you get paid.
The good news: almost every case comes down to one of three things. Either the link itself is the problem, the domain it lives on is the problem, or your account is temporarily limited. Each one has a different fix, so the first job is to work out which one you are dealing with. That takes about two minutes.
Fast diagnosis: work through it in this order
1. Send the exact same link to a friend (or to your own second account) in a DM. If Instagram refuses it there too, or shows a warning, the link or domain is flagged. Jump to the sections on shorteners, redirects and the destination.
2. Try a completely different, harmless link in your bio, such as your Facebook page or a major news site. If that is also refused, the problem is your account, not the link. Jump to the section on account restrictions.
3. If the other link works, but yours does not, try the full, final URL of your page instead of a shortened one (the one you see in the browser address bar after you open it). If the long version works, the shortener or a redirect was the issue.
4. Open Settings, then Account Status (under More info and support). If anything is listed under features you can't use, that is your answer, and you can appeal right there.
Write down what you find. If you end up reporting the problem to Instagram, a clear “this exact URL is blocked in bio and DMs, other links work fine” report is far more useful than “my link doesn't work”.
Cause 1: the domain has a bad reputation (very often a shortener)
How to recognise it: the link is refused everywhere on Instagram (bio, DMs, story sticker), and often on Facebook too, while other links work fine from the same account.
Meta does not publish its list of blocked domains or exactly how it scores them, so be careful with anyone claiming to know the formula. What is clear from Meta's own spam policy is that links are judged as links: content that is shared deceptively or to mislead people gets removed, and the systems look at where a link goes, not just what you wrote next to it.
Free link shorteners and some free link-in-bio or website builders are the classic trap here. A shortened link lives on a domain shared by thousands of people. If enough of them use it for spam or scams, the whole domain can get flagged, and your perfectly honest link goes down with it. You did nothing wrong; you just share an address with bad neighbours.
The fix: stop using the shortened version. Paste the full, final URL of the page you actually want people to land on. If your own website was flagged, check it for anything that looks like spam (hidden links, pop-ups, a hacked plugin injecting content) and clean it up before you ask for a review.
Cause 2: redirects, cloaking or a link that “changes” after the click
How to recognise it: you open your link and the address in the browser ends up somewhere different from what you pasted. Common culprits are affiliate links that bounce through several trackers, domain forwarding, and pages that make people click, share or follow before they can see the content.
Meta's spam policy is unusually specific about this. It prohibits deceptive redirect behaviour, meaning sites that require an action before showing the expected page and then change domain, or that automatically send people to a substantially different domain. It also bans cloaking (showing Meta's systems different content from what people see), misleading links that promise one thing and deliver another, and like or share-gating, where people must engage to unlock content.
The fix: link straight to the final destination, with no forwarding chain in between. If you sell through an affiliate programme, put the affiliate links on a page you own and link Instagram to that page instead. Remove any “share to unlock” steps from the landing page.
Cause 3: the destination itself (look-alike domains, scams, adult content)
How to recognise it: the domain is new, uses a misspelling or a brand name, or the page contains content that Meta's Community Standards restrict.
Meta's spam policy names domain impersonation directly: landing pages that pretend to be a reputable brand by using typos, misspellings or similar names. If your shop is called something close to a famous brand, or your URL looks like a login page, automated systems may treat it as phishing even when it is not. Meta's phishing help pages explain that phishing links lead to fake sites that look legitimate, which is exactly the pattern those systems hunt for.
Pages with sexual content, gambling or other restricted goods can also be blocked under Meta's other Community Standards. That is a policy decision rather than a bug, and a review is unlikely to change it.
The fix: use a domain name that is clearly yours, keep a visible About or Contact section on the page, make sure your site has a valid HTTPS certificate, and avoid login forms or payment screens that look like someone else's brand. If your content is restricted on Instagram, link to a page that is within the rules instead.
Cause 4: your account is restricted, not your link
How to recognise it: every link is refused, or you see “We restrict certain activity to protect our community” when you try to edit your profile, post or send messages.
Instagram says it may restrict features on accounts that appear not to follow its Community Guidelines or Terms of Use. Meta's transparency pages add that it notifies you when it adds restrictions, and that you can see your restrictions and how long they will last in Account Status. Instagram also confirms it puts limits on sending messages to stop DMs people may not want, so sending the same link to lots of people quickly is a fast way to hit a wall.
Instagram also states that new accounts, and accounts that repeatedly share content that breaks its Community Guidelines, do not get access to the Link sticker in Stories. So if the sticker is simply missing, a young account is the likely reason.
The fix: open your profile, tap the menu, go to Settings, and under More info and support tap Account Status. Look under features you can't use. If a restriction is listed and you believe it is wrong, tap it and use Request a Review. While you wait, stop repeating the action that triggered it: no rapid profile edits, no mass DMs with the same link, and no third-party apps that automate likes, follows or messages.
How to report a link that was blocked by mistake
Instagram does not publish a dedicated “unblock my link” form, and anyone who tells you otherwise is guessing. The official routes are the ones built into the app.
If a restriction or removed post appears in Account Status, appeal there with Request a Review. This is the most direct path because it is tied to a specific decision.
If nothing is listed in Account Status but your link is still refused, report it as a problem: open your profile, tap the menu in the top right, scroll to More info and support, tap Help, then Report a Problem. Include the exact URL, where it fails (bio, story sticker, DMs), the exact error text and a screenshot. Instagram's own help page asks for as much detail as possible, including what you were doing when the problem happened.
Be realistic about timing. Meta does not promise a turnaround for link reviews. Meta's transparency centre does say it can restore posts when it learns a link it removed as malicious is no longer harmful, so fixing the underlying problem on your site before you report genuinely helps.
What to do while you wait
Don't keep re-pasting the same blocked link. Repeated attempts look like exactly the behaviour spam systems are built to catch, and can turn a link problem into an account restriction.
Don't try to sneak the link past the filter with spaces, dots spelled out or a different shortener. Meta's spam policy treats attempts to get around its systems as deceptive, so this can make things worse.
Do put a working, clean link in your bio right now so you keep getting traffic: a page on a domain that has nothing to do with the blocked one. Tell followers in a story where to find you in the meantime.
Do clean up the destination. Remove redirects, trackers you don't need and anything that looks like a pop-up or a fake button. Then report the problem once, with details, and give it time.
Stop it happening again
Most repeat cases come from the same place: links that live on someone else's crowded domain, or that pass through several hops before reaching the real page. The more direct and recognisable your link is, the less there is for an automated system to be suspicious about.
That is the reason many creators use one link-in-bio page on a stable domain rather than a rotating set of shortened links. A page like onesol.io/yourname stays the same in your bio while you change what's on it, so you are not re-editing your profile every week, and you are not sharing a shortener's reputation. No setup can guarantee Instagram will never block a link, but a direct, consistent address with honest content behind it removes the most common triggers.
If a link is ever refused again, come back to the four-step diagnosis at the top. Knowing whether it is the link, the domain or the account is half the fix.