Facebook Messenger scams: how to spot them and what to do if you replied
Quick answer
A Messenger message asking for money, a code, your password or a click on a link is likely a scam, even if it comes from a friend's account. Don't reply or click. Check with the friend another way, report the chat in Messenger, and file at ReportFraud.ftc.gov if you lost money.
- Comes by
- Social media, Website
- Pretends to be
- Last updated
How it works
Scammers reach you on Messenger in two main ways. They hack a real account, or copy a friend's name and photo into a new one, and then message you as that person. Or they message you cold, posing as Facebook, a seller, a buyer or someone who wants to chat.
The message is built to rush you. Common versions:
- A friend in trouble who needs money or a gift card right now.
- A prize, grant or giveaway that you need to pay a fee to claim.
- A warning from "Facebook" that your account will be closed unless you log in through a link.
- A Marketplace buyer or seller who wants to move the chat to text or another app, or who sends a screenshot as proof of payment.
What they want is money, or your login and a verification code. Facebook's own help pages say it will not ask for your password or financial details in a message.
Red flags
- A friend suddenly asks for money, a gift card or a code, in a chat that feels slightly off
- A message that threatens to close your account unless you click a link
- A prize or grant that needs a fee up front
- Pressure to act now and to keep it between the two of you
- A request to move the conversation to WhatsApp, text or email
- A screenshot offered as proof of payment instead of money in your account
- Spelling and design mistakes in a message that claims to be from Facebook
Example message
Hey, it's me. I'm locked out of my account and need a quick favor. Can you receive a code for me? Also I won a grant, you can get one too, just click [link] and pay the small fee.
What to do
- 1
Stop replying and don't click
Leave the chat open only to report it. Don't send codes or money.
- 2
Check with the real person another way
If it looks like a friend, call them or text them on a number you already have. Ask if their account was hacked.
- 3
Report the chat in Messenger
Open the person's name in the chat and choose "Something's Wrong". Facebook asks you to report scams rather than answer them.
- 4
If you clicked or entered your password
Report your account as compromised in Facebook's help pages, reset your password and turn on two-factor authentication. Change the password on any other account that used the same one.
- 5
If you paid or gave financial details
Contact your bank or card issuer right away. For gift cards, contact the card company with the card number and receipt. Our guide on what to do after a data breach covers password and credit steps.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Scammers pick Messenger targets from public profiles and friend lists, plus data from breaches and people-search sites. A message that uses your real name, town or a mutual friend feels credible for that reason. Serus finds where your address and phone number are listed and removes them, and alerts you when your details show up in a breach, so fewer scammers can build a convincing message about you.
More Facebook scams
Frequently asked
My friend messaged me asking for money. Is it really them?
Often it isn't. Scammers hack accounts or copy profiles. Call your friend on a number you already have before sending anything.
Is Facebook Messenger itself a scam?
No. Scammers use Messenger, like any messaging service, to reach people. Facebook asks you to report scam messages in the app.
I replied but didn't click anything. Am I safe?
Probably, if you shared nothing. Stop replying, report the chat and keep an eye on your accounts.
Will Facebook ask for my password in a message?
No. Facebook's help pages say to avoid messages that ask for passwords or financial details, even when they claim to be from Facebook.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
