Perhaps. Perhaps Instagram has a shit way of resetting your password without verifying via email. As I explained in another comment:

Instagram claimed someone suspiciously tried to access my account from somewhere else, with a map. I said it wasn't me. They said I needed to change my password, so I needed to give them my old and new passwords.

I'm not curious enough to risk the scam.