Scam warning
Hacked Friend's Account
A scammer takes over a friend's Facebook, Instagram or WhatsApp account. Then they message you as your friend, asking for a code sent to your phone, money, or help with an “investment”.
Also called: Social media impersonation, Verification code scam, 2FA code scam
The one thing to remember
Never send anyone a code that was texted to you, not even a friend.
How it happens
- You get a message from a friend you know.
- They say: “I'm sending you a code by mistake, can you send it back to me?”
- That code is really the key to your account. Now the scammer has it.
- Or they ask for money, or tell you how they doubled their money and you can too.
Warning signs
- Being asked for a code that came to your phone.
- A friend who writes differently than usual.
- Urgent requests for money.
- Offers to double your money or crypto.
- Links to “vote” for them in a contest.
What to do
- Call your friend on the phone to check if it's really them.
- Never share codes sent to you by text or email.
- If you shared a code, change your password right away and turn on two-step login.
- Tell your friend their account may have been hacked.
Last checked: October 31, 2026