Social Media Safety: 10 Ways to Spot Scams and Fake Friends

By J. Mesa

Social media is great for catching up with friends, watching funny pet videos, and picking up a kådu recipe or two. Like any busy place, it has a few shady characters. They want your personal information, your money, or your account.

You can outsmart them. Here are ten habits that keep you safe, plus what to do if something goes wrong.

What are the most common social media scams?

Fake friend or follow requests from copied or invented profiles
Phishing messages that link to fake login pages
Marketplace and shopping scams with deals that never ship
Giveaway and prize scams that ask for a fee or your details
Romance and investment scams that build trust over weeks, then ask for money
Impersonation of someone you know, asking for urgent help

Every one of them works by getting you to trust the wrong person.

1. How do I spot a fake friend request?

Don’t accept requests from people you don’t know. Check the profile first.

Few photos, or photos that look like stock images
An account created in the last few weeks
No friends in common
A second request from someone who is already your friend

That last one means a scammer copied your friend’s profile. Decline it, and tell your friend through another channel.

2. What do phishing messages look like?

Scammers send private messages that look real. Be careful with any message that:

Pressures you. “Act now” and “limited time offer” are meant to stop you from thinking.
Has odd spelling or grammar. Real companies proofread.
Contains a link. Hover over it on a computer, or press and hold on a phone, to see the real address before you open it.
Asks for your password or a code. Real platforms never ask for these in a message.

3. Should I trust a deal that looks too good?

No. A price far below normal, a seller who wants payment by gift card or wire, or a buyer who “overpays” and asks for a refund are all scams. Pay through the platform’s own checkout, which offers buyer protection.

4. How do I check before I share?

False stories travel fast. Before you share a post that makes you angry or afraid, look for the same story on a news source you trust. If you can’t find it, don’t pass it on.

5. Why should I avoid clickbait?

Headlines built to shock often lead to sites that install malware or collect your data. If a headline looks too wild to be true, it is. Skip the link.

6. How do I lock down my profile?

Privacy settings. Control who sees your posts, your friend list, and your contact details. Set them to friends only.
Passwords. Use a strong, different password for each account. A password manager helps.
Two-factor authentication. Turn it on. It works like a second lock on your door.
Personal details. Keep your birthday, address, and phone number off your public profile.

7. How much sharing is too much?

Posting where you are in real time tells strangers when your house is empty. Details such as your pet’s name, your school, and your hometown answer common security questions. Share trip photos after you get home, and keep the answers to security questions to yourself.

8. Are quizzes and giveaways safe?

Be careful. “Which character are you?” quizzes often ask for the same facts banks use to verify you. Giveaways with huge prizes collect personal details or ask for a “shipping fee.” Research any contest before you enter, and never pay to claim a prize.

9. What is like-farming?

Scammers post content designed to collect likes and shares, such as “Share if you love your mom.” Once the page has a large audience, they change it to promote scams or sell it. Don’t like or share suspicious posts to help someone gain followers.

10. How do I report a scam or a fake account?

Every major platform has a report button on profiles, posts, and messages. Use it. Reporting gets fake accounts removed and protects the next person. You can also report fraud to the Federal Trade Commission at reportfraud.ftc.gov.

What should I do if my account gets hacked?

Change your password right away. If you can’t log in, use the platform’s account recovery page.
Log out of all other devices in the security settings.
Turn on two-factor authentication.
Check for changes: a new email address or phone number on the account, new posts, new messages.
Tell your friends, so they ignore messages the attacker sent as you.
Change the password on any other account that used the same one.

What should I do if I sent money to a scammer?

Act fast. Call your bank or card company and ask to stop or reverse the payment. Report the scam to the platform, to reportfraud.ftc.gov, and to the FBI at ic3.gov. Keep screenshots of the profile and the messages. The sooner you report, the better your chance of getting money back.

How do I help kids and older relatives stay safe?

Teach your friends and family, and pay special attention to our Manåmko’. Scammers target older adults with fake family emergencies and prize notices.

Agree that any request for money gets a phone call to confirm, on a number you already have.
Set up privacy settings and two-factor authentication on their accounts with them.
Remind them that a real friend will not mind waiting while they check.

For kids, keep accounts private, know who they talk to, and make it easy for them to tell you when something feels wrong.

Is it safe to log in to other sites with my social media account?

It is convenient, and it ties those sites to one account. If someone takes over that account, they reach everything connected to it. Protect it with a strong password and two-factor authentication, and review the list of connected apps in your settings once or twice a year. Remove the ones you no longer use.

What habits keep me safe over time?

Trust your gut. If something feels off, ignore the message or block the person.
Stay updated. Platforms change their security settings often. Check yours a few times a year.
Spread the word. The more people who know these tricks, the fewer victims scammers find.

Your next step

Spend ten minutes today on your privacy settings and turn on two-factor authentication. If your business uses social media, your team needs these skills too. Cerberus Cybersecurity teaches them in our cybersecurity training. Contact us to set up a session.