Key takeaways
- Impersonation scams pretend to be someone you trust, like a family member, a company, or a recruiter.
- The biggest warning signs are urgency, a request for money or a code, and a reason you can't call them.
- Always check through a contact you already know before you send money, codes, or personal details.
- If you already paid or shared a code, call your bank and secure your accounts straight away.
- Report the scammer in the app, and tell friends or customers which accounts are really yours.
Scammers are good at sounding like someone you know. A message from "your son" with a new number, a friendly recruiter with a great job, or a support account that replies to your complaint can all feel real in the moment. Falling for one does not make you foolish. These scams are designed to catch busy, kind people.
This guide explains the most common impersonation scams on social media and WhatsApp, the warning signs, what to do if you are targeted, and how to protect your friends and customers.
Common impersonation scams
The details change, but most scams follow a few familiar patterns.
- "Hi, it is me, I have a new number": a message that seems to come from a child, parent, or friend who lost their phone and needs money urgently.
- The fake recruiter: a job offer out of the blue, often for easy online tasks, that later asks you to pay a fee or "deposit" to keep earning.
- The fake support account: after you complain about a bank, airline, or app in public, an account with a similar name replies and asks you to message them your details.
- The fake giveaway or brand page: a page copying a real brand or famous person, promising prizes or investment returns if you pay a small fee first.
- The "code by mistake" message: a friend's hacked account asks you to forward a code they "sent to you by accident". It is really the code to take over your account.
- The fake security warning: a message that says your account will be closed unless you log in through a link.
Warning signs to look for
One sign alone does not prove a scam. Two or three together should make you stop and check.
What real contacts usually do
- Are happy for you to call them back on a number you already have.
- Give you time to think.
- Use the company's official app or website for payments.
- Never ask for your password or a login code.
- Have an account with a real history of posts and followers.
Scam warning signs
- Pressure to act right now, or a secret you must keep.
- Money by bank transfer, gift cards, or crypto.
- A reason they can't talk on the phone.
- A request for a code, password, or ID photo.
- A new account, or a name with a small spelling change.
- An offer that sounds too good to be true.
What to do if you are targeted
If something feels off, pause. A real person will understand if you take a few minutes to check.
Stop and do not reply
Do not send money, codes, or documents, and do not click any links in the message.
Check through a known contact
Call the person on the number you already have, or contact the company through its official app or website.
Act fast if you already paid
Call your bank or card provider straight away. The sooner they know, the more they may be able to do.
Secure your accounts if you shared a code
Change your password and turn on two-step verification. Our guide on what to do when your account is hacked walks you through it.
Keep the evidence
Take screenshots of the messages, the profile, and any payment details before you block them.
How to report the scammer
Reporting helps the platform remove the account before it reaches other people. It only takes a minute.
- In the app: every big platform, including WhatsApp, Facebook, Instagram, TikTok, Telegram, and LinkedIn, has a report option on the profile or the message. Choose scam, fraud, or pretending to be someone.
- Block after you report, so they can't message you again.
- Fraud authorities: in many countries you can also report scams to the police or a national fraud or consumer protection service. This is especially worth doing if you lost money.
- Your bank: tell them about any payment, even a small one.
The platform decides whether to remove an account, and it does not always act on the first report. If the account is still up, report it again with any new evidence.
Protect your friends and customers
If scammers are pretending to be you or your business, the people who trust you are the targets. A few simple steps make you much harder to copy.
- Post a pinned note listing your real accounts, and say you will never ask for payment or codes by message.
- Put links to your official accounts on your website, so people can check.
- Turn on two-step verification on every account, so your real accounts can't be taken over.
- Ask friends and customers to report copycat accounts when they see them.
If a fake account is using your name or photos, report it as impersonation. Our guide on reporting a fake account that pretends to be you explains what proof to gather and where to report on each platform.
This guide is general information, not legal advice. Every platform and country has its own rules, and they change. We are not lawyers. For legal questions about your case, please speak to a qualified lawyer.