Yes my wife got a IG notification that someone was changing the email addy. When she clicked to undo it, it was a bogus IG link even though it had instagram.com in the url. sounds like this is how you were hacked. https://help.instagram.com/149494825257596 you'd have to provide them with a video selfie file