On the Rise: Social Media and Phishing Scams

Social media platforms have become a new battleground for phishing scams, with cybercriminals exploiting these networks to steal personal information and compromise accounts. As social media usage continues to grow, so does the risk of falling victim to these sophisticated schemes.

How Phishing Works on Social Media

Phishing on social media involves scammers impersonating trusted entities or individuals to deceive users.

Common tactics

• Fake Profiles: Scammers create fake accounts that look like real users or brands, tricking people into sharing sensitive information
• Malicious Links: Fraudulent messages or posts contain links that lead to fake login pages or malware downloads
• Direct Messages (DMs): Cybercriminals send personal messages claiming urgent issues, such as account verification or prize winnings, to lure victims into providing information

Common Social Media Phishing Tactics

1. Impersonation of Friends or Influencers: Scammers pose as a trusted friend or public figure, asking for financial help or login credentials
2. Fake Brand Promotions: Posts or messages promise giveaways or discounts, requiring users to click a link and provide information
3. Account Recovery Scams: Fraudsters claim your account has been hacked and offer assistance, but instead steal your login credentials
4. Phishing Ads: Malicious advertisements redirect users to fake websites designed to collect personal data

Real-World Examples

• Instagram Fake Giveaways: Users receive messages claiming they’ve won a contest, but are asked to click a link and enter their login details
• LinkedIn Job Offers: Scammers send fake job invitations asking for personal information or payments for “application fees”
• Facebook Impersonations: Fraudsters mimic friends and request urgent financial help or sensitive data

Protecting Yourself on Social Media

To avoid phishing scams on social media, follow these tips:

1. Verify Accounts: Check for the verified badge on brand or influencer profiles before interacting
2. Be Skeptical of Links: Avoid clicking on links in messages or posts without verifying their authenticity
3. Enable Two-Factor Authentication (2FA): Adds a second layer of security to your accounts
4. Monitor Privacy Settings: Limit what personal information is visible to others on your profiles
5. Report Suspicious Activity: Most platforms allow users to report phishing attempts and fake profiles

What to Do if You Fall Victim

If you suspect your social media account has been compromised:

• Change your password immediately
• Enable 2FA for extra protection
• Notify the platform to secure your account
• Warn your connections to avoid potential scams from your account
• Monitor your accounts for unusual activity

Want to Know More?

Inspired eLearning | Social Media Phishing: A Primer

Pluggedin | On the Radar: Social Media Phishing, Gender Gap with Teens and TikTok AMBER Alerts

Trend Micro | What Is Social Media Phishing?

LinkedIn | Be Careful Against Most Common Social Media Phishing Scams