Scam library · Texts · Email & phishing
Hacked friend account message scam
A message arrives from a friend you know: 'Hey, can you do me a favor? I'm stuck and need to borrow $300 until tomorrow.' Or: 'Can you vote for my niece in this contest? You'll get a code, just send it to me.'
The account is real, but the person typing isn't your friend. Scammers took over the account and are messaging everyone in the contact list.
What the message looks like
From: Message from a friend's Facebook account
Hi!! Can you help me? I'm trying to win a contest and need people to vote. I'll send a code to your phone, just send it back to me 🙏
Hurry, voting closes in 10 minutes!
How this scam works
Hacked Facebook, Instagram, WhatsApp and email accounts are used this way because people trust messages from friends. The scammer may read old conversations to copy your friend's style and mention real details.
Common asks include money through a payment app, gift cards, a 'verification code' that is actually your own login code, or links to 'see a photo of you' that lead to fake login pages. Each successful trick takes over another account and continues the chain.
Some hacked accounts post fake investment success stories, crypto tips or items for sale, so the friend's followers believe them.
The kindest thing you can do is check with your friend in a different way, like a phone call or a text to their known number. If their account was hacked, they may not know yet, and your warning helps them recover it before more people are scammed. You can also report the account to the platform.
Red flags
- A friend asking for money urgently in a message.
- Requests to send back a code sent to your phone.
- Links to 'see a photo or video of you'.
- Unusual writing style or language.
- Excuses why they can't call.
How to tell it’s fake
- Call or text your friend on a known number.
- Ask a question only they'd know.
- Never send codes sent to your phone to anyone.
- Check their profile for odd recent posts.
What to do if you clicked, paid or shared info
Don’t panic, and don’t blame yourself. These scams are built by professionals. Act quickly, one step at a time.
If you clicked a link or called back
- Don't click or reply. Let your friend know through another channel and report the account.
If you paid
- If you sent money, contact your bank or payment app right away.
If you shared personal info, a password or a code
- If you shared a code or logged in, change your password immediately and turn on two-step verification.
Where to report and get help (U.S.)
If a message seems legit and you’re still not sure, get a second opinion before you act. Reporting helps stop scammers, even if money can’t be recovered. If you are in danger, call 911.
- Your bank or card issuer
Call the number on the back of your card or on your statement, not one from the message. Ask them to stop or reverse the payment and to watch the account. - Federal Trade Commission (FTC) · ReportFraud.ftc.gov
Report the scam and get a step-by-step recovery plan. - FBI Internet Crime Complaint Center (IC3) · ic3.gov
Report scams that happened online, especially if money was lost. Include phone numbers, websites and payment details. - AARP Fraud Watch Network Helpline · aarp.org helpline
Free, for anyone of any age: trained volunteers help you sort out next steps. 877-908-3360, Monday to Friday, 8 a.m. to 8 p.m. Eastern. - IdentityTheft.gov · IdentityTheft.gov
If you shared your Social Security number or someone opened accounts in your name.
How Gmork Scam Guard would warn you
Scam Guard in Chrome and Edge on your computer checks messages you have open in Facebook, WhatsApp Web and other messaging sites. It recognizes 'send me the code' and urgent money requests, even from friends. If a message seems legit, a scam expert can check it with you.
Scam Guard can miss things, so the checks above still matter. See what it warns about and what it keeps private.
Questions people ask
- How do I know if my friend was hacked?
- Contact them by phone or another app and ask.
- Why do they want my code?
- It's often a login code for your own account.
- My account was hacked. What do I do?
- Use the platform's hacked account recovery tools and tell friends.
- Should I report the hacked account?
- Yes, it helps the platform lock it down.
- Why does the message sound like my friend?
- Scammers can read past messages in a hacked account and copy the person's style. A familiar tone isn't proof.