Account Recovery 'I Can Get It Back' DM Scam Examples
After you post publicly asking for help with a hacked account, someone DMs claiming to be an 'ethical hacker' who can get it back for a fee. The scammer's real goal is to exploit your existing distress by taking an upfront payment, then either vanishing immediately or stringing you along with further 'phase' fees while never recovering anything. The lever is desperation combined with the appearance of a friendly rescuer arriving right when you need one. Legitimate account recovery goes only through the platform's own official support channels, never through a private individual who contacts you unsolicited after seeing your post.
Last reviewed: 1 June 2026
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Hey, I saw your post about your hacked [platform] account. I am an ethical hacker and I specialise in account recovery. I can get it back for you within a few hours for [amount]. DM me if interested.
I recovered my own account last month using [name]'s service. DM them — they are legitimate and fast. They only charge [amount] up front and the rest when you are back in.
I can hack into your account and reset the email so you regain control. I need your old username and [amount] in [cryptocurrency] to start. 100% success rate, no recovery no refund.
What the scammer wants
To take an upfront payment from a distressed account holder, then either vanish or extract additional 'phase fees' without ever recovering the account.
Red flags in the message
- Unsolicited DM immediately after you post about being hacked
- Claims of guaranteed success with illegal 'hacking' methods
- Request for payment in cryptocurrency or gift cards
- Fake testimonials from other accounts in the same DM thread
- Request for your old password or personal details
A safe response
Legitimate account recovery only goes through the platform's official Help Centre. No third party can 'hack in' on your behalf. Report the DM as a scam.
What not to send
- Upfront payment
- Cryptocurrency or gift card codes
- Old passwords or security answers
What to do if you already replied
- Accept the payment is very likely unrecoverable and report to your bank or crypto exchange if applicable
- Work through the platform's official account recovery flow instead
- Warn others in the public thread where scammers found you
Evidence to preserve
- Screenshot the full message or call details
- Note the sender number, email, or profile
- Save any links (without clicking) and payment details
- Record dates and times
Frequently asked questions
I already paid the 'hacker' and my account still isn't back — should I pay the extra fee they're asking for?
No — additional fees rarely lead to recovery and are simply a continuation of the same scam. Stop paying, and pursue recovery only through the platform's official support or help centre instead.
How do I actually recover a hacked social media account?
Use the platform's own official account recovery tools, typically found by searching 'account hacked' in their help centre, which may involve identity verification steps like a photo ID or video selfie. This process can take time, but it's the only channel that can genuinely restore access.
Can I get my money back from the fake hacker?
It depends heavily on the payment method — if paid by card, contact your bank about a dispute; cryptocurrency or informal transfer apps are much harder to recover. Report the scammer's profile to the social media platform so it can be taken down.
How can I avoid this next time if my account gets hacked again?
Post publicly about being hacked only if necessary, since it can attract these unsolicited 'helper' DMs, and go straight to the platform's official recovery process instead. Enabling two-factor authentication and using a strong, unique password beforehand also reduces the chance of being hacked in the first place.