Hacked-Friend 'Check This Out / Vote for Me' Link
A message from a friend's hacked account sends you a link ('is this you?', 'vote for me', 'check this out') that phishes your login and spreads to your contacts.
Think a message like this reached you? You can check it right now.
What this scam is
You receive a DM from a friend or family member's account with a curiosity- or urgency-based hook — 'Is this you in this video?', 'Can you vote for me in this contest?', 'OMG look what they posted about you' — and a link. The link leads to a fake login that steals your credentials; your account is then used to send the same message to your contacts, spreading the takeover. Because it comes from someone you trust, people click. Verify with the friend through another channel before clicking.
What it usually looks like
- A DM from a friend with a link and a curiosity/urgency hook.
- 'Is this you?', 'vote for me', or 'look at this' wording.
- A fake login page after clicking.
- The same message later sent from your account.
Common warning signs
- Out-of-character links from friends.
- Curiosity/urgency hooks ('is this you?').
- A login prompt after clicking a friend's link.
- Friends reporting messages 'from you.'
Example wording scammers use
“Hey is this you?? 😱 [link]”
“Can you vote for my niece in this pageant? Just log in here to vote: [link]”
These are illustrative examples written by ScamSplain, not real messages.
What the scammers want
- Your account login.
- To spread to your contacts.
- Access for further scams.
What to do
- Don't click; verify with the friend through another channel — their account is likely hacked.
- Never log in via a link from a DM.
- Enable two-factor authentication.
- Warn the friend and report the message.
What to do if you already responded
- Change your password, revoke sessions, and enable 2FA.
- Warn your contacts that messages 'from you' may be scams.
- Report at reportfraud.ftc.gov.