People hear about romance scams and picture some mysterious hacker breaking into a Facebook account with a few clicks. That isn’t how it usually happens. Most of the time, the scam starts with trust. Someone talks to you every day. They seem patient. They remember little details. Then they ask for something that opens the door for them.

They Usually Don’t Need to Hack Anything

A romantic scammer often wants your login details more than they want to crack Facebook’s security. They’ll send a fake login page. They may ask you to “verify” your account. Sometimes they convince people to share a one time security code because they invent a believable reason on the spot. It feels personal, which is exactly why people fall for it.

The Tricks Look Ordinary

You don’t always see flashing warning signs. The messages can sound normal. They might ask you to click a link because a photo won’t load. Or they claim Facebook locked their account and they need your help. Small excuses. Familiar language. Before you notice what’s happening, you’re typing information into the wrong page.

• A fake login screen that looks almost right, until you notice the web address later

• Sometimes the request sounds oddly caring, and that’s what catches people off guard.

• One security code. Just one. They act like it solves a tiny problem, even though it hands them access.

What Happens After They Get In?

Once they have your account, they often message your friends while pretending to be you. They ask for money. They share the same fake investment story. Sometimes they try to pull more people into romance scams. It spreads because your friends recognize your name, not because the story makes much sense.

And changing your password after they get inside isn’t always enough if they’ve already added their own recovery email or switched security settings. That’s the frustrating part.

The Better Way to Think About It

The real danger isn’t some unstoppable cyber attack. It’s getting pulled into a conversation that slowly changes what feels normal. You stop questioning little requests because the relationship seems real. That shift is what scammers count on.

• If a message pushes you toward a login page, pause long enough to open Facebook yourself instead.

• Two factor authentication helps, though only if you never hand over the code because someone sounds convincing.

• Friends can spot strange messages faster than you expect, so pay attention if someone asks whether you really sent something.

Because once trust gets used as a tool, even smart people miss obvious clues.