Social-Media DM Scams: The Friend-in-Need Pattern
Direct messages — from hacked friends, fake brands, or bogus 'support' — are a major scam channel; an overview of the patterns and how to verify.
Think a message like this reached you? You can check it right now.
What this scam is
Social-media DMs deliver many scams: a hacked friend sends a phishing link or a money request, a fake brand/influencer announces a prize, a bogus 'support' account replies to your complaint, or a stranger opens a long-con romance/investment chat. Because messages come from within a platform you trust, people lower their guard. The unifying defenses are to verify the person through another channel, never click links or share codes/credentials in DMs, and be skeptical of prizes, urgent money requests, and support that messages you first.
What it usually looks like
- A DM with a link, prize, money request, or 'support' offer.
- A message from a friend that seems out of character.
- A brand/influencer or 'support' account that isn't verified.
- A stranger striking up a fast, friendly chat.
Common warning signs
- Links or code/credential requests in DMs.
- Urgent money requests 'from a friend.'
- Prizes or support arriving by DM.
- Strangers steering toward money/investments.
Example wording scammers use
“(From a 'friend') 'Is this you?? [link]' or 'Can you help me out real quick?'”
“(From 'support/brand') 'You won! Claim here' or 'DM us your login to fix it.'”
These are illustrative examples written by ScamSplain, not real messages.
What the scammers want
- Your login, codes, money, or engagement.
- To exploit trust inside the platform.
- To spread via hacked accounts.
What to do
- Verify a friend through another channel before clicking or sending money — they may be hacked.
- Never share logins/codes or pay via DMs.
- Use only official verified accounts for support; ignore DMs that message you first.
- Report and block; enable two-factor.
What to do if you already responded
- Change your password, revoke sessions, enable 2FA; warn your contacts.
- Contact your bank/app if you paid.
- Report at reportfraud.ftc.gov.