High riskSocial Media

Hacked Friend Help Scam

A message arrives from a friend's account asking for money, a verification code, or to click a link. In reality the friend's account has been taken over, and the scammer is using your trust in them to reach you.

Quick verdict

Risk level
High risk
Scam type
Impersonation scam
Main red flag
A friend's account suddenly asking for money, a code, or an urgent favour out of character.
What to do first
Do not send anything. Contact your friend a different way, such as by phone, to check it is really them.

Understanding this scam

A message arrives from a friend's account asking for money, a verification code, or to click a link. In reality the friend's account has been taken over, and the scammer is using your trust in them to reach you.

Social media scams spread through direct messages, ads, hacked friends' accounts, and fake profiles. They range from account-takeover phishing and fake giveaways to investment and romance fraud, exploiting the trust and reach of your own network.

If you take one thing from this guide, make it this: A friend's account suddenly asking for money, a code, or an urgent favour out of character. Do not send anything. Contact your friend a different way, such as by phone, to check it is really them.

If your message looks slightly different, check the Facebook Account Recovery Scam or the Two-Factor Code Text Scam, both are close cousins of this pattern. Every related guide lives in the Social Media Scams guides, and the scam checker can scan the text you received.

A typical example

Example pattern, not a real report
Example pattern: 'Hey, are you awake? I'm locked out of my account and the reset code went to your number by mistake. Can you read it back to me? Thanks so much!'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

The tell here: A friend's account suddenly asking for money, a code, or an urgent favour out of character.

What the data shows

$1.4B
reported lost to fraud that began on social media in the US in 2023
Source: US Federal Trade Commission
Top channel
social media was among the most common ways scams reached people in 2023
Source: US Federal Trade Commission

Warning signs

  • An unexpected request for money, gift cards, or an e-transfer from a friend
  • A request to read back a verification or reset code that arrived on your phone
  • A sudden, urgent tone that does not sound like how your friend usually writes
  • A story about being stranded, locked out, or having a one-time emergency
  • A link sent with little explanation, such as 'is this you in this video?'

Your safest response

  • Contact your friend through a different channel, such as a phone call, to confirm it is them
  • Ask a question only the real friend could answer before doing anything
  • Never share any code that arrives on your own phone with anyone
  • Report the account to the platform if it appears to be hacked

If you have already engaged

  • If you entered login details, change that account's password and turn on two-factor authentication
  • If you shared a code, your own account may now be at risk, so secure it immediately
  • If you sent money, contact your bank or payment provider straight away to try to stop it
  • Warn your friend and your shared contacts so others are not caught the same way

What to avoid

  • Do not send money or gift cards based on a message alone
  • Do not share verification codes, even with someone who claims to be a friend
  • Do not click unexplained links or 'is this you' video links

You might also see

High risk Social Media

Facebook Account Recovery Scam

This scam uses a hacked friend's account to ask you to be a 'recovery contact' or share a code, which actually hands your own account to the scammer.

Created by Scam or Safe Editorial Team
High risk Text Message

Two-Factor Code Text Scam

In this scam a fraudster triggers a genuine two-factor or one-time code to your phone, then poses as support staff or a contact to pressure you into reading it back so they can take over your account.

Created by Scam or Safe Editorial Team
High risk Social Media

Romance Scam DM

This scam builds an online romantic relationship through messages, then invents an emergency or investment to ask for money, while always avoiding meeting in person.

Created by Scam or Safe Editorial Team

Questions people ask

Why would my real friend ask me for a code?
They would not. A code sent to your phone protects your own account, and a request to read it back is a common takeover trick, even when it appears to come from someone you know.
It really is my friend's account and photo, so how can it be a scam?
Scammers take over genuine accounts, so the name and photo can be entirely real while a stranger is typing. Confirm through a separate channel before acting.
I already sent money. What now?
Contact your bank or the payment service immediately to report it and ask whether the transfer can be stopped or reversed. Acting quickly gives the best chance of recovery.
How do I help a friend whose account was hacked?
Tell them by phone or in person, and point them to the platform's account recovery process. Warn mutual contacts so the scammer cannot reach them next.

Last reviewed June 2026 · Written & reviewed by the

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.