SCAM AWARENESSAccount recovery scams
Account recovery scams target people who have lost access to a social media, email, or gaming account. Scammers pose as hackers, "recovery experts," or support staff and promise to get your account back for a fee. They take your money and often your personal information, but they do not restore your account. Some also offer to recover money lost to earlier scams.
How this scam works
After a hack, many people post asking for help. Scammers watch for those posts and reply in comments or private messages. Some use accounts made to look like official support, or pay for ads and fake reviews. They claim special access to the platform, inside contacts, or hacking skills, and may share fake success stories.
They ask for an upfront payment, often by gift card, cryptocurrency, or payment app. Then they ask for more, saying there are extra fees or a final step. They may ask for your login details, recovery codes, or a photo of your ID, which they can use to take over more accounts. In the end, the account is not recovered and the scammer stops responding.
What it can look like
EXAMPLE · NOT A REAL MESSAGEDirect message: "Hi, I saw your post about being hacked. I'm a certified recovery specialist and I've helped hundreds of people. I can restore your account within 24 hours for $200 in crypto. Just send me your email, old password, and the code you receive."
Warning signs
- A stranger contacts you after you post that you were hacked
- Someone claims to be platform support through a personal account or direct message
- A fee is required to recover your account
- Payment requested in gift cards, cryptocurrency, or payment apps
- Requests for your password, recovery codes, or one-time login codes
- An offer to recover money you lost in a previous scam
How to protect yourself
- Use only the recovery pages found in the platform's official help center, which you reach by typing the site address yourself.
- Never pay anyone to recover an account or lost money.
- Do not post publicly that you were hacked with details that invite strangers to contact you.
- Never share passwords, recovery codes, or login codes with anyone.
- Keep your recovery email and phone number current, and turn on two-step verification.
If you already responded
- Stop all contact and do not send any more money, no matter what the person says.
- If you shared login details, change your passwords and sign out of other sessions where you still can.
- Report the hacked account and the scammer's profile through the platform's official help center.
- If you paid by card or payment app, contact the provider about disputing the charge.
- If you sent ID images, visit IdentityTheft.gov for steps to protect yourself.
- Report the scam to the FTC and to the FBI's IC3.
Get step-by-step recovery help →
Where to report it
- Report fraud to the FTC ↗
- Report internet crime to the FBI (IC3) ↗
- Report identity theft and get a recovery plan ↗
Common questions
Can someone really recover my hacked account for a fee?
Be very skeptical. People who promise to restore accounts for a fee, especially strangers who contact you first, are often scammers. Major platforms offer their own recovery tools in their official help centers. Using that official process is the safest choice, even when it is slow or frustrating.
Does social media support contact you through direct messages?
Be very careful with any support message from a personal-looking account, a comment reply, or an unsolicited direct message. Real support processes go through the platform's official help center and settings. Never pay, share codes, or click links from someone claiming to be support who reached out to you first.
Can a recovery company get back money I lost to a scam?
Be very careful. Fake "fund recovery" services often target people who were already scammed. They charge fees and then disappear. Do not pay anyone who promises to recover lost money. Instead, contact your bank or payment provider directly and report the loss to the FTC and IC3, which do not charge for reports.