What Happened to MGP25 Cyberint? The Full Story Behind the Facebook Lawsuit

MGP25 Cyberint Services is dead. The small Spanish company sold fake Instagram likes and comments through automation software that mimicked the official Instagram app. Facebook caught them, sued them in Madrid's Commercial Court in 2020, and a judge ordered them to shut down immediately.

Quick Answer: MGP25 Cyberint Services was a Spain-based company that sold fake Instagram engagement through automation software. Facebook sued them in Madrid's Commercial Court in June 2020, and the court granted an injunction ordering MGP25 to cease all fake engagement operations immediately. The website mgp25.com is now effectively dead, with no active services.

What Was MGP25 Cyberint Services?

MGP25 Cyberint Services SL was a small company registered in Madrid, Spain. According to business records, it had just 2 employees and generated roughly $77,000 in annual revenue. The company was founded and operated by Marcos Gomez Platon, a telecommunications engineer who went by "mgp25" online.

On the surface, MGP25 Cyberint positioned itself as a cybersecurity consulting firm focused on penetration testing and reverse engineering. In fact, when BuzzFeed News contacted Platon about the lawsuit, he denied selling engagement, stating: "My company doesn't sell likes, my company is a security consultant for penetration testing and reverse engineering."

But Facebook told a very different story.

The Instagram API Connection

Before the lawsuit, Platon was already well-known in developer circles. He created "Instagram-API," a popular open-source PHP library on GitHub that reverse-engineered Instagram's private mobile API. The tool could do everything the official Instagram app could do: upload photos, send direct messages, view stories, and interact with posts.

In January 2020, Instagram filed a DMCA takedown notice against the project. GitHub removed the entire repository along with over 1,500 forks. Instagram claimed the tool violated anti-circumvention provisions of the DMCA because it was "expressly designed to circumvent the Company's effective access controls."

Platon chose not to fight the takedown. He told Gizmodo the copyright claim was "a very odd stance" but said he wouldn't file a counter-notice because he didn't know "how far Instagram and Facebook were prepared to go."

Five months later, he found out.

How MGP25 Cyberint Sold Fake Instagram Engagement

According to Facebook's lawsuit, MGP25 Cyberint's operation went beyond innocent reverse engineering. The company built automation software that exploited Instagram's systems to sell fake likes and comments at scale.

How the Software Worked

The service was designed to mimic the official Instagram app when connecting to Instagram's servers. This is a critical detail. By impersonating the real app, MGP25's software could bypass Instagram's detection systems that would normally flag bot-like behavior.

Here's what the operation looked like:

• Automated bot accounts generated fake likes on customer-purchased posts
• Fake comments were distributed across Instagram to inflate engagement metrics
• The software impersonated Instagram's official app to avoid detection
• Customers paid MGP25 for specific quantities of fake engagement

The Scale of Operations

While MGP25 Cyberint was small compared to some fake engagement operations, the combination of its automation tools and the widely-distributed Instagram-API library created a broader ecosystem. The Instagram-API project alone had over 1,500 forks on GitHub before it was taken down, meaning derivative tools based on Platon's reverse engineering work were everywhere.

Facebook explicitly noted that MGP25 Cyberint continued selling fake engagement even after receiving cease-and-desist letters and having its accounts disabled on the platform. They kept going anyway.

The Facebook Lawsuit That Killed MGP25

In June 2020, Facebook announced legal proceedings against MGP25 Cyberint Services alongside a separate lawsuit against Massroot8, a data scraping operation. These were filed simultaneously as part of Facebook's first-ever multi-jurisdictional enforcement action.

Where the Case Was Filed

Unlike the Massroot8 case, which went to federal court in San Francisco, the MGP25 case was filed in Madrid's Commercial Court. Facebook Inc. and Facebook Ireland jointly brought the suit under Spanish law, specifically citing Spain's legal protections for databases and online platforms.

This was strategic. Filing in Spain meant Facebook could pursue enforcement directly where MGP25 Cyberint operated, making the court order immediately enforceable.

What Facebook Alleged

The lawsuit accused MGP25 Cyberint Services and its founder of:

• Selling fake Instagram likes and comments for profit
• Building automation software designed to circumvent Instagram's security measures
• Impersonating the official Instagram app to evade detection
• Continuing operations after receiving cease-and-desist letters
• Violating Instagram's Terms of Use and Spanish database protection laws

The Court's Decision

In August 2020, the Commercial Court in Madrid ruled in Facebook's favor. The court granted a full injunction ordering MGP25 Cyberint Services and its founder to cease all fake engagement operations immediately.

Facebook's director of platform enforcement, Jessica Romero, called the action "an important milestone in our global legal enforcement against fake engagement."

MGP25.com Shut Down: What's Left Today?

If you visit mgp25.com today, you won't find much. The domain is technically still registered (it doesn't expire until 2027), but the site is essentially a blank page. There's no login, no registration, no pricing, no services, and no content.

Here's the current state based on our research:

• Domain status: Registered but inactive
• ScamAdviser trust score: 52/100 (below average)
• Trustpilot reviews: None found
• Sitejabber reviews: None found
• Active services: None

The domain sits on Contabo nameservers and was last updated in July 2025, but there's nothing to indicate any commercial activity. For all practical purposes, MGP25 Cyberint is gone.

Why MGP25 Cyberint's Shutdown Matters in 2026

The MGP25 case wasn't just about one small Spanish company selling fake likes. It set precedents that still affect the Instagram growth industry today.

Facebook's First Multi-Jurisdiction Enforcement

The MGP25 lawsuit was filed simultaneously with the Massroot8 case in the United States. This was the first time Facebook used multiple jurisdictions to enforce its Terms of Service against fake engagement sellers. It proved that Meta would pursue operators regardless of what country they were in.

Since 2020, Meta has continued filing lawsuits against growth service operators worldwide. The MGP25 and Massroot8 cases were essentially test runs for a global enforcement strategy.

The Lesson About Reverse-Engineered Tools

Platon built his reputation on reverse engineering Instagram's private API. That's a technically impressive achievement. But the same skills that created a popular open-source tool also enabled a commercial fake engagement operation.

The progression was clear: build the tools, understand the systems, monetize the access. And Meta was watching.

What It Means for Users

If you were a customer of MGP25 Cyberint, you didn't just lose a service. Any fake likes or comments you purchased were likely purged from Instagram as part of their regular bot cleanup cycles. That means you paid for engagement that disappeared.

This is the fundamental problem with fake engagement services. Even when they "work" in the short term, the followers and likes eventually vanish. You're left with a worse engagement rate than when you started, because Instagram's algorithm noticed the inauthentic activity on your account.

Red Flags That MGP25 Cyberint Showed

Looking back, MGP25 Cyberint displayed several warning signs that should make anyone cautious about a growth service. If you're evaluating any Instagram service in 2026, watch for these patterns.

Obvious Red Flags

• Fake engagement as a product. Selling likes and comments generated by bots is the fastest way to get sued by Meta and get your customers' accounts flagged.
• Software that mimics official apps. Any service that needs to impersonate the real Instagram app to function is inherently operating outside the rules.
• Ignoring cease-and-desist letters. MGP25 kept operating after Facebook explicitly told them to stop. A legitimate business respects legal notices.

Subtler Warning Signs

• Tiny operation, no accountability. Two employees and $77K in revenue. If this service disappeared overnight, there was nobody to hold accountable and no way to get your money back.
• No review presence. MGP25 had zero reviews on Trustpilot or Sitejabber. Legitimate services build public reputations over time.
• Mixing legitimate and illegitimate services. Claiming to be a cybersecurity consultancy while selling fake engagement is a classic cover story.

For a deeper look at warning signs like these, check out our guide on how to tell if a growth service is about to shut down.

MGP25 Cyberint vs HCLOUT: A Comparison

The core issue with MGP25 Cyberint was that it sold fake engagement generated by bots. That model is fundamentally broken. Here's how a legitimate Instagram growth service compares.

The difference is fundamental. MGP25 Cyberint built tools to trick Instagram's systems. HCLOUT works within the platform's guidelines to deliver real growth from real people. One approach gets you sued. The other builds a sustainable business.

What HCLOUT Offers Instead

• Real followers and engagement that don't disappear in the next bot purge
• No password required, ever. Your account stays in your control.
• A free tier so you can try HCLOUT without spending anything
• 24/7 live chat support when you have questions
• 30-day refill guarantee if you aren't satisfied

If MGP25 Cyberint taught you anything, it should be this: services that rely on tricking platforms always get caught eventually. And when they do, it's the customers who lose their money and their engagement. For more context, see our full list of growth services that shut down in 2026.

Frequently Asked Questions

Is mgp25.com still working?

No. While the domain mgp25.com is technically still registered (it expires in 2027), the site is effectively dead. There are no services, no login, no pricing page, and no content. MGP25 Cyberint Services was ordered to cease operations by a Madrid Commercial Court in August 2020, and nothing has been active since. Don't trust any site claiming to revive this service.

What happened to MGP25 Cyberint?

MGP25 Cyberint Services was sued by Facebook Inc. and Facebook Ireland in Madrid's Commercial Court in June 2020. The company had been selling fake Instagram likes and comments through automation software that mimicked the official Instagram app. The court granted an injunction in August 2020 ordering all fake engagement operations to stop immediately.

Is there an alternative to MGP25 Cyberint?

Yes. If you're looking for Instagram growth, HCLOUT is a legitimate alternative that delivers real engagement without fake bots or automation tricks. Unlike MGP25 Cyberint, HCLOUT doesn't require your password, offers a free tier, and has 24/7 support. You can also check our guide on the best Instagram growth services for more options.

Did MGP25 Cyberint scam people?

MGP25 Cyberint was a real company that delivered a real (though illegitimate) service. Whether that counts as a scam depends on your definition. They did provide fake likes and comments as advertised, but those were generated by bots, violated Instagram's Terms of Service, and could get customer accounts flagged. The fact that a court ordered them to shut down tells you everything about the legitimacy of their business model.

Where should I go instead of MGP25 Cyberint?

The best move is to use a service that works within Instagram's guidelines rather than against them. HCLOUT offers a free tier so you can test real growth without risk. Look for services with transparent pricing, public reviews on Trustpilot or ScamAdviser, 24/7 support, and a refund policy. Avoid anything that asks for your password or promises engagement from bots.

MGP25 Cyberint Is Gone, But the Pattern Keeps Repeating

MGP25 Cyberint built technically impressive tools and used them for a business model that was always going to end in a lawsuit. Selling fake Instagram engagement by impersonating the official app was never sustainable, and Facebook proved that in court in 2020.

The domain still sits there, empty and useless, with a 52/100 trust score and zero reviews. If you were looking for MGP25 Cyberint as a growth service, it's been dead for over five years now.

The lesson is simple: services that trick platforms get caught, get sued, and get shut down. And their customers get nothing. If you want Instagram growth that actually lasts, you need a service that works with the platform, not against it.

HCLOUT is built on that principle. No bots, no fake engagement, no reverse-engineered tricks. Just real growth from a legitimate service with a free tier, 24/7 support, and a 30-day refill guarantee.

Try HCLOUT Free | See Pricing

Last updated: February 2026. MGP25 Cyberint Services was ordered to cease operations by a Madrid Commercial Court in August 2020.