PL
HU
EN
A message that looks like an ordinary chat
"Hey! Are you there? I have a small problem, can I ask you a favour?" The message comes from someone you've known for years. The profile photo matches, the writing style matches too. A moment later comes the request: "Can you send me a payment code for $60? I'll pay you back tomorrow, I just can't access my account right now." It sounds familiar, it sounds credible | and that's exactly why it's so dangerous.
What's really happened is a messaging account takeover. Someone broke into your friend's profile | usually through a previous password leak or a click on a fake link | and is now messaging everyone in their contact list, one by one, with the same request.
Why this works better than a call from a stranger
The classic grandchild scam requires the victim to believe an unfamiliar voice. Here that problem doesn't exist | the photo, the name, and the chat history are all real, because the account genuinely belongs to your friend. The scammer doesn't need to build trust from scratch, because they've inherited it along with the hijacked profile.
On top of that comes the typical multi-channel pattern: first a text message, and if you don't reply right away, a "call" may follow | in reality also from a hijacked number or an internet calling app | with the same urgency. Several channels at once create an impression of consistency that doesn't really exist.
One rule that always works
A one-time payment code is a single-use password to your money. Don't share it with anyone over messenger, no matter how well you know the sender | and especially not when the situation feels urgent and emotional.
Instead of replying in the same conversation, call your friend on the number you already have | the one saved in your phone contacts, not one given in the message. If it's really them, this will be sorted out in a few seconds. If it's a scammer, you'll find out immediately that the account has been hijacked, and you can warn other friends on the same contact list.
What to do if your own account gets hijacked
- Change your messenger password immediately, ideally from a different device
- Turn on two-step verification if you haven't already
- Warn your friends through another channel (text, phone call) that your account may have been hijacked
- Report the incident to the messaging platform if it offers that option
How we practise this in the ODYSSEY course
In the "Recognise the scam" module you'll find a simulation of exactly this situation | you practise recognising a hijacked account and unnatural urgency, and build the habit of confirming a situation separately before doing anything.