Messenger scams: the hacked friend message and fake money offers

Quick answer

A Messenger message from a friend asking for money, or with a link to claim money, may come from a hacked account. Don't click or pay. Call your friend on a number you know, and report it at ReportFraud.ftc.gov.

All scam alerts
Comes by
Social media
Pretends to be
Facebook
Last updated

How it works

Scammers can take over a profile, pretend to be its owner and con that person's friends. The FTC says a message that looks like it comes from a friend or family member may have come from a hacked account.

The FTC describes common versions. The message tells you to click a link to get your money, or promises government grants and money from programs. Some ask you to forward it to friends to be eligible. Links can lead to phishing, and may put malware on your device. Others ask for money, especially by cryptocurrency, gift card or wire transfer.

The FTC reports that since 2021, people have reported losing $2.7 billion to scams that started on social media.

Red flags

  • A friend messages out of the blue with a link to claim money
  • A friend asks for money, especially by gift card, crypto or wire transfer
  • A message promising free grants or government money
  • A request to forward the message to several friends
  • A friend's message that sounds off or unlike them
  • A link that asks you to log in again

Example message

Scam example Don't reply, call back or tap anything in a message like this.
Unknown account
Hey, have you seen this? I just got my grant money, it took 5 minutes. Check it out here: [link]. You have to send it to 5 friends to qualify.

What to do

  1. 1

    Don't click or send money

    Even if the message looks like it's from a friend, their account may have been hacked.

  2. 2

    Check with your friend another way

    Call them on a number you already have. Let them know their account may be compromised.

  3. 3

    Delete the message

    Don't forward it.

  4. 4

    If your own account is hacked, warn your friends and recover it

    Let friends know not to click links from you or send money. Follow Facebook's account recovery steps and change your password. The FTC has a guide to recovering a hacked email or social media account.

  5. 5

    Report it

    File a report at ReportFraud.ftc.gov.

Report it

Serus

Check if your details are exposed with Serus

Scammers find your number and address on data brokers and people-search sites. Serus removes them.

Run a free scan

Why you got it

Scammers need a way to reach you, and names, phone numbers, email addresses and home addresses are easy to find on people-search sites and data broker listings or in old data breaches. The fewer places your details are listed, the fewer scammers can reach you with a message that looks personal. Serus finds the sites that list you and removes your data, and alerts you when your details show up in a breach.

More Facebook scams

All common Facebook scams

Frequently asked

Why did my friend send me a strange Messenger link?

The FTC says their account may have been hacked. Don't click, and contact them another way.

What if my own Facebook account is hacked?

Warn your friends, follow Facebook's recovery steps and change your password. The FTC has a step-by-step guide.

Are Messenger grant offers real?

The FTC says free grant and money offers on social media are scams. Real agencies don't message you out of the blue.

Is Messenger itself a scam?

No. Scammers use hacked accounts and fake profiles on social platforms.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Related scams

All scam alerts

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.