The message comes from someone you know personally. Same avatar, the old conversation still above it, your name used correctly. They ask you to help out until tomorrow. This is the most effective scheme in messengers, because the trust is already there — nobody has to build it.
The scheme is built for speed: the less time to think, the fewer questions. Any pause — calling back, asking for a detail, mentioning it to someone — breaks it entirely.
The main schemes
| Scheme | How it looks | What gives it away |
|---|---|---|
| A hacked friend | “Send me a couple of hundred until tomorrow, I'll explain later” | A money request without a call; avoiding voice messages |
| “Mum, I'm in trouble” | A message from an unknown number in a relative's name | New number, urgency, a request not to call anyone else |
| Fake support | “Your account will be deleted, confirm your login” | Support does not write first and does not ask for codes |
| “Vote for my daughter” | A link to a contest from a friend | The link opens a login form for the messenger |
| Easy money work | An offer from a stranger, starting in a messenger | Payment up front, a request to install an app |
| A mistaken transfer | “I sent you money by accident, please return it” | The money came from a stolen card; the refund becomes your debt |
Hey! Listen, could you lend me some cash until tomorrow? My cards are frozen
A request for money in a chat from someone who normally calls. That alone is reason enough to stop.
Let me call you
Can't talk, I'm at work. Just send it, I'll explain tonight
The key moment. Avoiding a call is not busyness but impossibility: the voice would not match.
The card is in my wife's name, send it there: 2202 ****
Details in someone else's name with a ready explanation — given before you asked for one.
What was our maths teacher called?
A question with no answer online. This is usually where the conversation ends: the script has nothing for it.
Signs a friend’s account is hacked
- A request for money at all. Someone close would sooner call than write.
- Avoiding a call. “Can't talk, I'm at work” is the standard answer, because the voice would not match.
- A different way of speaking. Familiar turns of phrase are gone; forms of address appear that the person never uses.
- Details in another name. Explained as “my wife's card” or “a friend's card”.
- The same message to several people. If someone else got it too, the question is settled.
What to do
-
Call the old number
Do not reply in the chat — call yourself, using the number from your contacts, not the one in the message. Thirty seconds settles it.
-
Warn the account owner
By another route: a call, an SMS, a mutual friend. They may not know their account is gone.
-
Do not open the links
Not even “just to see”. A messenger login page arriving in a message is phishing in its purest form.
-
Report and block
A report speeds up the block and protects whoever is next.
If the money is already sent
-
Call the bank immediately
A transfer can sometimes be stopped in the first minutes. The later you call, the smaller the chance.
-
Report to the police the same day
Keep the conversation and the recipient's details — screenshots will be useful.
-
Check your own account
If you opened a link or entered a code, follow the signs of a break-in: sessions, linked contacts, second factor.