High riskSocial Media Scams

Hacked Friend Help Scam

A message arrives from a friend's account asking for money, a verification code, or to click a link. In reality the friend's account has been taken over, and the scammer is using your trust in them to reach you.

Quick verdict

Risk level
High risk
Scam type
Impersonation scam
Main red flag
A friend's account suddenly asking for money, a code, or an urgent favour out of character.
What to do first
Do not send anything. Contact your friend a different way, such as by phone, to check it is really them.

What this scam usually looks like

A message arrives from a friend's account asking for money, a verification code, or to click a link. In reality the friend's account has been taken over, and the scammer is using your trust in them to reach you.

Example message pattern

Example pattern — not a real report
Example pattern: 'Hey, are you awake? I'm locked out of my account and the reset code went to your number by mistake. Can you read it back to me? Thanks so much!'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

Red flags to watch for

  • An unexpected request for money, gift cards, or an e-transfer from a friend
  • A request to read back a verification or reset code that arrived on your phone
  • A sudden, urgent tone that does not sound like how your friend usually writes
  • A story about being stranded, locked out, or having a one-time emergency
  • A link sent with little explanation, such as 'is this you in this video?'

What to do

  • Contact your friend through a different channel, such as a phone call, to confirm it is them
  • Ask a question only the real friend could answer before doing anything
  • Never share any code that arrives on your own phone with anyone
  • Report the account to the platform if it appears to be hacked

If you already clicked or replied

  • If you entered login details, change that account's password and turn on two-factor authentication
  • If you shared a code, your own account may now be at risk, so secure it immediately
  • If you sent money, contact your bank or payment provider straight away to try to stop it
  • Warn your friend and your shared contacts so others are not caught the same way

What not to do

  • Do not send money or gift cards based on a message alone
  • Do not share verification codes, even with someone who claims to be a friend
  • Do not click unexplained links or 'is this you' video links

Similar scams

High risk Social Media

Facebook Account Recovery Scam

This scam uses a hacked friend's account to ask you to be a 'recovery contact' or share a code, which actually hands your own account to the scammer.
High risk Text Message

Two-Factor Code Text Scam

In this scam a fraudster triggers a genuine two-factor or one-time code to your phone, then poses as support staff or a contact to pressure you into reading it back so they can take over your account.
High risk Social Media

Romance Scam DM

This scam builds an online romantic relationship through messages, then invents an emergency or investment to ask for money, while always avoiding meeting in person.

Frequently asked questions

Why would my real friend ask me for a code?
They would not. A code sent to your phone protects your own account, and a request to read it back is a common takeover trick, even when it appears to come from someone you know.
It really is my friend's account and photo, so how can it be a scam?
Scammers take over genuine accounts, so the name and photo can be entirely real while a stranger is typing. Confirm through a separate channel before acting.
I already sent money. What now?
Contact your bank or the payment service immediately to report it and ask whether the transfer can be stopped or reversed. Acting quickly gives the best chance of recovery.
How do I help a friend whose account was hacked?
Tell them by phone or in person, and point them to the platform's account recovery process. Warn mutual contacts so the scammer cannot reach them next.

Last reviewed: June 2026

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.