High riskSocial Media

Fake Brand Support Reply Scam

In this scam, fake accounts monitor public complaints to a bank, airline, or telecom and quickly reply pretending to be official support, then move you to DMs to phish your login, card, or a 'verification' payment.

Quick verdict

Risk level
High risk
Scam type
Brand support impersonation
Main red flag
A 'support' account replies to your complaint and asks for login, card, or payment in DMs.
What to do first
Verify the account is the official, verified one and use official support channels.

How this scam works

In this scam, fake accounts monitor public complaints to a bank, airline, or telecom and quickly reply pretending to be official support, then move you to DMs to phish your login, card, or a 'verification' payment.

Social media scams spread through direct messages, ads, hacked friends' accounts, and fake profiles. They range from account-takeover phishing and fake giveaways to investment and romance fraud, exploiting the trust and reach of your own network.

In short, the giveaway is usually simple: A 'support' account replies to your complaint and asks for login, card, or payment in DMs. Verify the account is the official, verified one and use official support channels.

Scammers rotate tactics constantly, the same operation may also run the Meta Support DM Scam and the Bank Impersonation Phone Scam. See the full Social Media Scams guides hub, or test a suspicious message with the scam checker.

How to spot this scam

  • A support reply from a lookalike, unverified account
  • A quick move to DMs for 'verification'
  • Requests for your login, card, or a payment
  • Slight misspellings in the account handle
  • Pressure to act fast to resolve your issue

What the message looks like

Example pattern, not a real report
Example pattern: After you tweet a complaint, an account with a similar name replies, 'So sorry! DM us your account login and card to verify and we'll resolve this right away.'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

What gives it away: A 'support' account replies to your complaint and asks for login, card, or payment in DMs.

The scale of it

$1.4B
reported lost to fraud that began on social media in the US in 2023
Top channel
social media was among the most common ways scams reached people in 2023

How to protect yourself

  • Check that the account is the official, verified one
  • Contact the company only through its official app or website
  • Never share login, card, or codes in a DM
  • Report and block impersonating accounts

Already responded? Do this now

  • If you shared a login, change that password immediately
  • If you shared card details, contact your bank
  • Enable two-factor authentication on affected accounts
  • Report the impersonator to the platform and brand

Mistakes to avoid

  • Do not trust a support reply just because it is fast
  • Do not share login or card details in DMs
  • Do not pay a 'verification' fee to support

Related scams to know

Common questions

How do fake support accounts find me?
They monitor public posts that mention a company, then reply quickly to people who are frustrated and likely to respond without checking the account.
How do I spot the impersonator?
Check for the official verified badge and exact handle; lookalikes use slight misspellings. Reach support through the company's official app or site instead.
I gave them my login. What now?
Change your password immediately, enable two-factor authentication, contact your bank if card details were shared, and report the account.
How do I get real help?
Use the company's official app, website, or verified social account, not an account that replies to your public complaint.

Last reviewed June 2026 · Written & reviewed by the

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.