You get a message from someone you know. Maybe it’s your cousin. Maybe it’s an old coworker you haven’t spoken to in months. They say their Facebook account was hacked and they need your help. Or they warn that your account is about to be hacked too. It feels personal because it comes from a familiar name.
That’s exactly why this scam keeps working.
How the Scam Usually Starts
A Facebook account hacked scam is built around panic. Scammers either break into a real account or create a fake profile that looks close enough. Then they start messaging friends before anyone notices something’s wrong.
Sometimes they ask you to send a security code that landed on your phone. Other times they tell you to click a recovery link because your account is “at risk.” The words change. The goal doesn’t.
Why People Fall for It
Most people aren’t fooled because they don’t understand technology. They’re fooled because the message arrives from someone they trust. You don’t stop to question every text from your brother or your best friend. Nobody does.
Honestly, I think these scams are nastier than the obvious fake prize messages. They borrow trust that someone spent years building. That part always feels a little cheap.
• A message from a familiar account, which lowers your guard before you even start reading
• Sometimes the scammer says they’re locked out and asks for a login code. Don’t send it. That code belongs to your account.
• Fake recovery pages. They often look close enough that people rush through them.
• Friends getting the same strange message later, because hacked accounts are often used to target everyone in the contact list
The Small Signs People Miss
Here’s the thing. Real security alerts don’t depend on random friends collecting codes for you. If someone asks for a verification code that arrived on your phone, stop right there.
Watch for little changes too. The writing suddenly sounds different. The message arrives at an odd hour. They avoid answering simple questions only your friend would know. Those tiny details matter more than flashy warnings.
A Quick Story
Raj got a message from a college friend while waiting for his tea to cool on the kitchen counter. The friend claimed his account had been hacked and needed a code “just for recovery.” Raj asked where they first met. No reply. Five minutes later the account disappeared, and he was glad he’d trusted the awkward silence instead of the message.
What You Should Do Instead
Don’t click the link sitting in that message. Open Facebook yourself through the app or your browser if you want to check your account. That extra step takes a few seconds, and it saves a lot of trouble.
If a friend seems hacked, call them. Send a text. Use another app. Anything except replying inside the suspicious conversation. People forget how easy that is because tapping the message feels quicker.
• Turn on two factor authentication. It adds one more wall between a scammer and your account.
• Change your password if something feels off, even if you’re only slightly suspicious.
The strange part is that these scams don’t rely on brilliant hacking. They rely on one rushed moment. One click. One code. One tiny decision that feels harmless until it isn’t. Next time a familiar face asks for something unusual, are you really talking to them?