What Scammers Do With Hacked Social Accounts
Why criminals want your social media account: scamming your contacts, fake sales and investment posts, extortion, and reselling. How each works and how to protect yourself and your friends.
People often say, "Why would anyone hack my account? I'm nobody." But your account is valuable because of who is connected to it. Your friends, family and followers trust messages from you. Criminals take over ordinary accounts to exploit that trust, and to reach even more accounts.
What they do with it
| Misuse | How it works |
|---|---|
| Scam your contacts | Messages asking for urgent money, gift cards or help. See family emergency scams. |
| Steal more accounts | "I sent you a code by mistake, can you forward it?" The code resets your friend's account. |
| Fake investment posts | Stories about crypto profits with a "trusted manager". See investment scams. |
| Fake sales | Selling furniture, phones or tickets that do not exist, often on marketplaces tied to your profile. |
| Extortion | Demanding payment to return the account, or threatening to post private material. |
| Ads and payments | Running ads using your saved card. |
| Reselling | Accounts with followers or short usernames are sold. |
If a friend's account asks for money, a code or an investment, check with them by phone. Their account may be in someone else's hands.
Illustrative example
- The code was a reset code for your account.
- Urgency and a casual tone from a trusted contact.
- What to do: never share it. Call your friend to warn them their account is hacked.
Protect yourself and your friends
- Secure your accounts with unique passwords and two-step verification. See securing social media accounts.
- Never forward login codes, whoever asks.
- Be wary of investment, sales and emergency messages, even from friends.
- Report hacked accounts to the platform, which helps get them back to their owners.
If your account was used
Recover it through the official route, warn your contacts, and check what was sent. See warning friends after a hack and your first hour after an account takeover.
Got an odd message from a friend? Paste it into CyberWatch AI Scan for a free check, then call them.
For more, read our guide to account takeover and identity protection.
Frequently asked questions
Why would anyone hack my ordinary account?
Your account comes with something valuable: people who trust you. Scammers use that trust to get money, codes and more accounts from your friends and family.
My friend's account is posting crypto investment wins. Is it real?
Very likely not. 'I made money with this investment manager' posts are a common sign of a hacked account. Contact your friend another way.
The hacker is demanding money to give my account back. Should I pay?
No. Paying rarely gets the account back and marks you as someone who pays. Use the platform's official recovery process.
Sources
- How To Recover Your Hacked Email or Social Media Account, US Federal Trade Commission
- How to spot top scams that started on social media, US Federal Trade Commission
- Social media: how to use it safely, UK National Cyber Security Centre
