According to a report in technology website VentureBeat.com, Jani from Finland discovered the security flaw in Instagram on his own.
He found a bug in Instagram which requires you to be at least 13 before even signing up, that let him delete any comment on the social network.
"He reported the bug by email, offered proof by deleting a message on one of Facebook's test Instagram accounts and it was fixed in February. Facebook paid him the bug bounty in March," the report added.
"I would have been able to remove anyone, even Justin Bieber," the report quoted Jani as saying.
The Finnish boy wishes to become a security researcher. "It would be my dream job. Security is very important," he was quoted as saying.
He used the reward money to buy a new bike, football gear and computers for his two brothers.
Like Google and Microsoft, Facebook also has a bug bounty programme.
In February, Facebook announced that it had paid $4.3 million (roughly Rs. 28.6 crores) in rewards to more than 800 security researchers for over 2,400 submissions since launching its bug bounty programme in 2011.
In 2015, 210 researchers received $936,000 (roughly Rs. 6.2 crores) with an average payout of $1,780 (roughly Rs. 1.18 lakhs).
Get your daily dose of tech news, reviews, and insights, in under 80 characters on Gadgets 360 Turbo. Connect with fellow tech lovers on our Forum. Follow us on X, Facebook, WhatsApp, Threads and Google News for instant updates. Catch all the action on our YouTube channel.