The attack works because the two sides of the ledger are priced differently. Filing costs the filer nothing and requires no proof at the moment the strike lands, because Meta does not check the authenticity of a complaint when it is made [8]. Absorbing one costs the account holder whatever they earn during the weeks an appeal runs [5], and enough of them stack into a temporary takedown [8]. Olly, who posts public domain images or ones he has permission to use [3], has been struck for multiple posts at a time, all from a single email address [4].
Set that against Meta's own support pricing. Verified on Instagram costs 9.99 pounds a month and includes 24/7 access to live chat support [14]. The $50 Olly paid was given as 37 pounds [5], about 3.7 months of that paid support channel [22]. Most demands run higher, usually a few hundred dollars, once the claimant moves the conversation to Telegram [16].
The workflow assumes the creator files an appeal and waits for review. Creators do something else instead. Olly said he paid as a last resort because it was quicker than going through Meta [10]. Abin Tom Sebastian, who runs the Morbid Kuriosity account, told the BBC that Meta forced you to pay for support to talk, and that he lost brand contracts to another creator with no reassurance it would not recur [20]. This is a queue with a price on the front of it, not a communications gap.
Paying did not clear the account either. More strikes arrived immediately [11], and the volume of claims left the account demonetised, so high-performing posts earned nothing [12]. Law enforcement bodies tell victims not to pay ransoms for exactly this reason [21].
Meta told the BBC its systems are designed to protect people from this happening in the first place [6], and that after review it restored the affected content and added protections [7]. Those protections were applied to named accounts after the BBC forwarded examples [13], which is a patch per account rather than a change to what happens when an unverified claim arrives [8]. Instagram's standing advice compounds it: only rights holders or an authorised representative may report infringement, and affected users should take it up with the rights holder directly [15], which here means negotiating with the person on Telegram [16].
For anyone running a report-and-remove pipeline, the grid is cost to file against time to reverse. Free to file and hours to reverse is a nuisance. Free to file and weeks to reverse is a market. The clearing price sets itself just under the victim's weekly revenue. The number that exposes it is median time-to-restore on the claims you later reversed, plus repeat-filing rate per filer identity: if one email address can strike one account dozens of times in a year [4], that shows filer identity is not being scored at all.
The ransom is priced off the appeal clock. Until reversal runs faster than a creator's payment cycle, $50 will keep looking like the cheaper option to the person paying it, even though in the case the BBC documented it bought nothing [11].
