Social Media Account Takeover Scam

A hacked or cloned social media account messages the victim's friends and family asking for money, gift cards, or a "favor" verification code, exploiting the trust of an existing relationship.

A scammer gains access to a real person's social media account, usually through a prior phishing link or a reused, breached password, then messages the account's friends and family from inside the trusted account. Posing as the real owner, they claim to be in a bind and ask for a quick loan, gift cards, or help receiving a "verification code" that's actually the code needed to take over the recipient's own account next, spreading the takeover through the victim's social circle.

• A friend suddenly asks for money or gift cards through a direct message.
• A request to share a verification code you just received by text.
• The message doesn't sound like how your friend normally writes.
• The friend is unreachable by phone or other means to confirm the request.

• Call or video chat to confirm identity before sending money to anyone contacting you on social media, even a close friend.
• Never share a login verification code you receive by text, even if a friend asks for it.
• Enable two-factor authentication on all of your social accounts.
• Report and alert your contacts immediately if your account is compromised.