Social Media and Account Takeovers
Attackers steal passwords or verification codes, then impersonate account owners to target their contacts.
How this scam operates
An attacker obtains a password, session, or one-time verification code and takes control of an online account. They may impersonate the owner, target trusted contacts, change recovery details, or demand payment to restore access. The initial code request can arrive from a compromised account belonging to someone you know.
Details can vary, but the goal is usually to create enough trust, fear, or urgency that you act before verifying the story. Caller ID, profile names, logos, and polished websites can all be copied.
What the scammer wants
Account credentials, verification codes, personal information, and control of an account or payment.
Common tactics
Unexpected contact, urgency, copied identities or websites, unusual payment methods, and resistance to independent checks.
Warning signs to look for
Request for a verification code
Someone asks you to read back or forward a one-time login or payment code.
Look-alike contact details
The sender address, domain, profile, or phone number resembles but does not match an official one.
Unexpected contact
The conversation begins through an unsolicited call, message, email, or pop-up.
What to do next
Take protective action even if you are not yet certain this is a scam.
-
recovery
Start official account recovery
Use the platform’s official recovery process from a trusted device.
-
Immediate response
Preserve evidence and secure access
Save messages, receipts, account names, URLs, and transaction details. If credentials were exposed, change them from a trusted device and review active sessions.
How to protect yourself
Pause unexpected requests involving money, codes, documents, or account access. Leave the original conversation and verify the claim using an official app, a known website, or a number from a statement or card. Do not rely on caller ID, profile names, or links supplied by the sender.
If you were affected
Stop contact and further payments. Contact the bank, payment service, marketplace, or platform through its official channel. Secure exposed accounts from a trusted device, preserve messages and transaction records, and report through the appropriate official service. Watch for follow-up recovery scams.
Open the recovery checklistRelated practical guides
How to Check a Suspicious Message
A calm verification process for unexpected texts, emails, direct messages, and alerts.
5 minute read
Read this guideProtect Your Accounts Before a Scam
Practical account settings and habits that reduce the impact of credential theft.
6 minute read
Read this guideOfficial help and reporting
Choose the service for your location. External links open the organization’s official website.
ReportFraud.ftc.gov
Federal Trade Commission
Official United States service for reporting fraud, scams, and bad business practices.
Action Fraud
City of London Police
The United Kingdom’s national reporting centre for fraud and cybercrime.
Phone: 0300 123 2040
Canadian Anti-Fraud Centre
Royal Canadian Mounted Police, Ontario Provincial Police, and Competition Bureau Canada
Canada’s central service for information about fraud and for reporting fraud and cybercrime.
Phone: 1-888-495-8501
Scamwatch
National Anti-Scam Centre
Australian government information and reporting guidance about scams.
IdentityTheft.gov
Federal Trade Commission
Official United States recovery planning and reporting service for identity theft.
Report Phishing
Cybersecurity and Infrastructure Security Agency
United States guidance for recognizing and reporting phishing messages.
Report a scam email
UK National Cyber Security Centre
Official United Kingdom instructions for forwarding suspicious emails, texts, websites, and calls.
Related scam types
Bank and Payment Scams
Messages and calls impersonate banks or payment services to steal credentials, verification codes, or money.
Read related guideIdentity Theft and Misuse
Stolen personal information is used to open accounts, take over services, redirect money, or impersonate the victim.
Read related guide