A friend was unfortunately trapped in a phishing attack and has lost access to her instagram account. The attacker has as expected changed the number and Email registered with the account. What options does she have?

You can report to Instagram: https://help.instagram.com/149494825257596

Email Instagram support. AFAIK, They'll ask the original owner to verify themselves by including a photo with govt ID etc.

done! Let’s see 🤞