What to Do When a Hacked Account Asks You for Money

You get a message on Facebook, Messenger, or Instagram from someone you know well — a friend, a cousin, an old coworker. They say they're stuck somewhere and need cash right away, or that they have good news and just need you to cover a small fee first. It feels urgent, and it feels like it's really them, because the name and photo are theirs.

Take a breath. This is one of the most common scams on social media today, and it's often not your friend writing at all. A hacked account asking for money is a well-worn trick, and it fools careful, smart people every single day — it's not a sign you weren't paying attention.

Here's how the scam works, the signs that give it away, and exactly what to do whether the message landed in your inbox or it's your own account that was taken over.

How the Scam Works

A scammer gets into a real account — often by sending a fake login page or a one-time code request that tricks the real owner into handing over access — or they build a lookalike account using a copy of your friend's name and profile photo. Either way, they then message everyone on that friend list.

The story changes, but the ask is usually the same: send money fast, and send it in a way that's hard to undo. That might be a gift card code read over chat, a wire transfer, a Zelle or Cash App payment, or even cryptocurrency. Scammers prefer these because once the money moves, it's gone — there's no bank to call and reverse the charge.

Signs the Message Isn't Really Your Friend

It feels rushed. You're told to act now, before you have time to think it over or ask anyone else.
The payment method is unusual. A real friend in a real emergency rarely asks for gift card numbers over chat.
They avoid the phone. Ask to call, and you'll often hear an excuse — a broken phone, bad service, "I can only text right now."
The writing feels off. Different word choices, odd phrasing, or a tone that doesn't sound like the person you know.
The profile has small cracks. Look closely and you may spot a recently created account, very few mutual friends, or a name spelled just slightly differently.

What to Do When You Get a Message Like This

Don't reply inside that chat. Anything you type there goes straight to the scammer, not your friend.
Reach your friend a different way. Call or text the phone number you already have saved for them — never a number given to you in the message itself.
Check with someone else who knows them. A mutual friend or family member may have gotten the same message, which is a quick giveaway.
Look at the account itself. Check for the warning signs above before you decide anything is urgent.
Never send money, gift cards, or a one-time verification code based on a message alone, no matter how convincing it sounds — a shared verification code is actually one of the most common ways these accounts get hacked in the first place.
Report and warn others. Report the account to the platform as hacked or impersonating, and post a public heads-up on your own account so other friends see it before they're targeted too.

If You Already Sent Money or a Gift Card

If this already happened to you, act quickly and don't be embarrassed about it — it happens to thoughtful, careful people, not careless ones. Contact your bank or payment service right away and explain what happened; the sooner you call, the better your chances. For a gift card, contact the retailer that issued it, since some can freeze an unused balance if you report it fast. You can also file a report at reportfraud.ftc.gov.

If you'd rather have a person walk through the next steps with you — securing accounts, figuring out what else might be at risk — our hack and scam cleanup service is built for exactly this kind of mess. Call us at (916) 521-0065 and we'll help you sort it out.

If It's Your Own Account That Got Hacked

Sometimes the account doing the messaging is really yours, just taken over by someone else. If that happens:

Change your password right away, to something strong and not used anywhere else.
Turn on two-factor authentication if the platform offers it — the same idea covered in our guide to turning on two-factor authentication for email applies here too.
Log out of all other sessions and devices in the account's security settings, which cuts off the scammer's access immediately.
Let your contacts know what happened, so anyone who already got a message from "you" knows to ignore it.

A lot of these takeovers start with a phishing link or a fake login page that looks real enough to fool anyone in a hurry. PorchswingProtect is made for seniors, works quietly in the background on Windows and Mac, and blocks the scam and phishing websites that lead to exactly this kind of trouble — with a real Porchswing person you can call if something still looks wrong.

What to Do if You're Stuck

If you're staring at a message right now and you're not sure what to make of it, that's a completely reasonable place to be. You don't have to sort it out alone or decide in a hurry.

If you want quiet protection on your Windows or Mac computer — with a real Porchswing person to call — learn about PorchswingProtect. Or call us at (916) 521-0065 and we'll help you set it up.

Common Questions

Can scammers really take over someone's Facebook account?

Yes. It usually starts with a phishing link or a shared verification code that hands over access without the real owner realizing it. From there, the scammer can message everyone on that person's friend list.

What if the message is from someone I don't even recognize?

Treat it the same way you would spam: don't respond, don't click any links, and block or report the account. The same warning signs apply whether you know the name or not.

Should I write back and try to catch the scammer in the act?

There's no need. Engaging rarely tells you anything useful and can waste your time or expose you to more pressure. Reporting the account and warning your real friend is enough.