How does a social media impersonation scam work?

One common variant involves hacking a real account through phishing or credential stuffing, then messaging the victim's contact list claiming an emergency — stranded abroad, wallet stolen, medical bills — and asking for a money transfer. Recipients who know the real person are more likely to respond without verification. The request is usually for a modest amount to avoid triggering suspicion.

A second variant involves creating a new account that copies the name, profile photo, and bio of a celebrity, influencer, or personal contact. These clones may operate entirely within DMs, reaching out to followers or friends with investment opportunities, 'exclusive' offers, or sponsorship deals. The impersonator exploits the follower's existing positive association with the real person.

Giveaway scams use impersonated celebrity accounts to announce 'crypto giveaways' — send a small amount to receive a larger amount back. The setup mimics the visual style of verified accounts, sometimes using compromised legitimate accounts to lend credibility. No one ever receives anything back.

A more targeted form involves cloning a friend's entire account and sending all their contacts a connection request. Once accepted, the clone gains visibility of posts and contacts for further targeting. Victims may not realise their friend has been cloned until they mention receiving messages from 'them' that the friend denies sending.