Social media account takeover scams

Account-takeover scams use fake 'disabled account', 'copyright', verification, or giveaway lures to steal your login or codes.

How social media account takeover scams work

You get a fake 'your account will be disabled', 'copyright strike', or 'get verified' message, or a request to forward a code.

The link is a fake login that captures your password and 2FA; a forwarded code registers your account on their device.

Real appeals and verification happen inside the official app, never via a message link or shared code.

Common opening lines

• “Your account will be disabled - appeal now to keep it.”
• “I accidentally sent my code to your number - forward it back?”
• “You're eligible for a verified badge - confirm your login.”

Example patterns

Sanitised examples - placeholders only, never real links or data.

Red flags

• credentials
• fake authority
• suspicious link
• otp

What to do now

1. Secure the account: change the password and enable app-based 2FA.
2. Sign out other sessions and remove unknown linked devices/apps.
3. Warn your contacts and report the takeover.

What not to do

• Don't share verification or one-time codes with anyone, ever.
• Don't 'appeal' or 'verify' an account via a link in a message.
• Don't reuse passwords; turn on app-based two-step verification.

If you already responded

If you went further: if you clicked, don't enter anything and change any details you typed; if you entered card details, freeze the card with your bank; if you shared an OTP, change the password and enable app-based 2FA; if you paid, contact your bank or provider immediately; if you installed an app or gave remote access, disconnect, uninstall, and change passwords from a clean device.

How to verify safely

Check account status only inside the official app or by typing the site address yourself; never share a verification code.

How to report

Report through official channels you find yourself - never a number or link from the message. Tell your bank or payment provider if money moved, and file with your national fraud or cybercrime body. Find the right links in the reporting directory. Open the reporting directory.

Watch for 'recovery' offers afterwards: anyone promising to get your money back for an upfront fee is running a second scam.

Sources checked

• FTC Consumer Advice - Imposter scams
• Google - November 2025 fraud and scams advisory

Last reviewed: 2026-06-05

This is general safety information, not legal, financial, or cybersecurity incident-response advice. We can't detect every scam or guarantee recovery - always verify through official channels.