Social Media Impersonation and Fake Support Scams: How to Spot Them (2026)

How social media impersonation scams work

Social media scams often start with a person or business you think you know. The FTC says scammers can take over an account or pose as someone you trust. Its advice is that if a friend messages you about money or a grant, you should contact them by phone before acting, because their account may have been hacked.

Fake customer support follows a pattern. Which? describes scammers who set up unofficial Facebook pages or groups using a company’s name, then contact people who post a complaint, sometimes by WhatsApp call and already knowing what the post said. The scammer says help depends on completing a form that asks for a lot of personal information. Which? also notes that scammers try to move people away from official support channels, and that when one group is removed, another with a similar name can appear.

The FTC adds that company impersonators change the number shown on caller ID and may claim a “problem with one of your accounts”. The same logic applies to a direct message: the name on screen proves nothing. Anything that moves you to a call, a form, or a payment is where the harm happens.

Eight warning signs

1. You messaged first, and “support” replied from a different account. Which? describes scammers who contact people after they post a complaint, sometimes already knowing what the post said. A brand’s real support team will point you to its own site or app.
2. A request to move to WhatsApp or a phone call. Which? says scammers try to move people away from official support channels. Treat any move to a private chat as a reason to stop and check.
3. A form that asks for a lot of personal information. Which? reports victims being told help depends on completing a form, even when they did not want compensation. Legitimate help rarely needs more than your order or case details.
4. A friend who suddenly asks for money or promotes a grant. The FTC says their account may have been hacked. Call them, or meet in person, before you act.
5. Payment by gift card, wire, or crypto. The FTC’s steps for a scam loss show how hard these are to reverse. See gift card scams and bank transfer scams.
6. A request for a code, password, or login link. Scamwatch lists passwords, PINs, and one-time codes among the things a scam caller asks for. The same applies in a chat. See SIM swap and account takeover scams.
7. A page or profile with a near-identical name. Which? describes pages named after a company plus a word like “Complaints”. Check the company’s own website for the social accounts it actually runs.
8. A deal or “verification” pushed through an ad or post. The FTC suggests searching the company name with words like “scam” or “complaint” before you buy from an ad or post.

How to check who you are talking to in two minutes

1. Stop replying. Do not click links or open attachments the account sends.
2. Find the company’s official website yourself, by typing it in, and look for the social accounts and support details listed there. The FTC advises contacting a company through a website you trust.
3. If it is a friend, phone them or ask in person. Do not use the same chat to confirm, since the scammer may control it.
4. Search the account name with the word “scam” or “complaint”, as the FTC suggests, and look at how new the account is and what it has posted.
5. Report the profile to the platform. Meta’s help page says you can report a profile that impersonates you or someone else, and you do not need a Facebook account to do it. Open the profile, use the three-dot menu below the cover photo, choose Report profile, and follow the prompts.

If you already paid or gave details

Act on what you gave. These steps follow the FTC’s “what to do if you were scammed” guidance and Which?

1. If you paid, contact the provider straight away. For a card, call the number on the back of it and ask for a refund. For a gift card, contact the issuer. For a wire or payment app, report it to the company and ask for a reversal. See the FTC’s what to do if you were scammed page.
2. If you gave a password or code, change the password on that account and any other where you reuse it, and turn on two-factor authentication, as the FTC advises for remote access scams.
3. If you shared a lot of personal details, tell your bank. Watch for follow-up contact, because Which? notes victims may keep the scammers’ details and the information they posted.
4. Report the account and the number to the platform. Which? advises reporting the group and the WhatsApp number to Meta.
5. Report it officially. See the list below.
6. Do not pay a “recovery” service. See recovery scams.

Where to report

• United States: ReportFraud.ftc.gov (FTC), ic3.gov (FBI Internet Crime Complaint Center), and the FCC consumer complaint center for scam calls.
• United Kingdom: Report Fraud, the national reporting service that replaced Action Fraud, or 0300 123 2040. In Scotland, call Police Scotland on 101.
• Australia: Scamwatch, and ReportCyber for cybercrime. IDCARE (1800 595 160) offers free help if your personal details were exposed.
• Canada: the Canadian Anti-Fraud Centre, 1-888-495-8501.
• India: National Cyber Crime Reporting Portal or helpline 1930.

More help from official sources

• FTC: How to avoid a scam
• FTC: Scams that start on social media
• FTC: What to do if you were scammed
• Meta: Report a profile that is pretending to be you or someone else
• Which?: Targeted by fake customer support

Scambaba is an independent educational project. Reporting and recovery options depend on where you live. How these guides are researched is on the editorial policy.

Frequently asked questions