You post on social media that a payment will not go through or an app will not open. A minute later a “support service” appears in your direct messages — with a logo, polite, ready to help. It is not support.
How it works
-
Monitoring mentions
Public complaints about a bank, a marketplace or a service are tracked automatically by company name. That is open data — no hacking involved.
-
Replying before the real support does
The real one answers in hours, the fake one in a minute. That speed is the main sign, though it feels like a virtue.
-
Moving you to direct messages
“Describe the problem privately” — where nobody else can see the conversation and nobody will write “these are scammers”.
-
Asking you to confirm your identity
Card number, a code from a message, a login “to your account” through a link. That is where it ends.
Payment keeps failing in the app, third time it has been declined
A public complaint naming the company. It is not only the company watching: mentions are tracked automatically.
Hello! Support here. Describe the problem in a private message and we will help
A reply within a minute. Real support answers in hours and in the same thread. The speed reads as care but is a warning sign.
To check the payment, give us the card number and the code from the SMS
A code confirms an operation, not an identity. Nobody ever asks for it — not a bank, not a shop, not support.
Signs of a fake account
| Sign | Why |
|---|---|
| They messaged you first, privately | Real support replies in the same thread or waits for a request through its own channels |
| The account is new | They get blocked regularly and new ones appear |
| Few followers, no history | An official account has been running for years |
| A name with an extra character or underscore | The exact name is taken by the real company |
| They ask for a code from a message | A code signs an operation; nobody asks for it |
| They send a link to “your account” | The page is fake and the domain merely similar |
| They hurry you and ask you not to get distracted | A pause breaks the script, so none is offered |
How to get in touch safely
- A public complaint naming the company
- Searching for support by name in a messenger
- Following a link from a reply
- Talking privately with whoever messaged first
- Contact from within the app or the company's site
- A call to the number on the back of your card
- Reaching the account via a link from the official site
- Verifying through a second channel when in doubt
If you already sent your details
-
Block the card
If you gave its details or a code — immediately, by calling the bank.
-
Change the password
If you typed it through a link, change it on the real site by going there yourself. Then follow the leak procedure.
-
Check sessions and linked contacts
Unknown devices, forwarding rules, changed recovery contacts — signs of a break-in.
-
Report the account
It speeds up the block and protects whoever posts the same complaint next.
The same trick is used in messengers in the name of people you know — those schemes are covered separately.