Hacked Social Media Accounts Pushing Crypto Scams

How hacked social media accounts push crypto scams

Scammers take over a real social media account. They then post as that person, for example claiming they made big profits from a crypto course or announcing a special NFT or token release. Followers who reply are sent direct messages asking them to send crypto or click a link. The link may lead to a fake investment or to a site that drains wallets. Because the account is real, followers trust it.

Warning signs a friend’s account was hacked

A friend suddenly posts about getting rich from crypto or a trading coach.
Guaranteed returns or a limited-time offer in a direct message.
Requests to send crypto or payment-app money to 'get started'.
An artist or project account announces a surprise mint or claim with a short deadline.
Writing style or posting times that do not match the real person.
Links to sites that ask you to connect your wallet.

How to avoid hacked-account crypto scams

Contact the friend another way, such as a phone call, before acting on any offer.
Do not click wallet-connect links from social posts or direct messages.
Protect your own accounts with unique passwords and two-factor authentication.
Check for login alerts and unknown devices on your accounts.
Research any investment with words like 'scam' or 'complaint' before paying.

Sent crypto because of a hacked account, or were you hacked? What to do now

If you sent crypto, stop contact and do not send more.
If your own account was hacked, use the platform's recovery process, change your password, turn on two-factor authentication, and warn your followers.
Preserve evidence before anything disappears: screenshots of chats, profiles, websites and app screens, plus receipts, emails, and a written timeline. Do not delete conversations or the app. Save posts, messages, and links.
Report it to the FBI at ic3.gov and to the FTC at reportfraud.ftc.gov, even if the amount is small. Include wallet addresses, transaction IDs (hashes), amounts, dates, and every website, app, username, and phone number involved. See /guidance/report-crypto-theft-fbi-ic3. Investment offers can also be reported to the SEC at sec.gov/tcr.
If you connected your wallet to a link, follow /guidance/crypto-stolen-first-72-hours.
Watch for recovery scams. Anyone who contacts you offering to get your crypto back for an upfront fee, or who claims to work with the FBI or IC3, is likely a scammer. IC3 says it will never ask for payment to recover lost funds or refer you to a company that does. See /guidance/can-stolen-crypto-be-traced.

Hacked accounts: common questions

A friend posted about making money with crypto. Is it really them?

Check before you act. Contact your friend another way, such as a phone call. A sudden post about getting rich from crypto or a trading coach is a common sign the account was taken over.

My account was hacked and is posting crypto scams. What do I do?

Use the platform’s official account-recovery process, change your password, turn on two-factor authentication, and warn your followers not to click links or send money.

Someone offers to recover my hacked account in exchange for crypto. Is it safe?

No. That is a recovery scam. Use only the platform’s own recovery process.

I sent crypto because of a hacked friend’s post. Can I get it back?

Stop contact and don’t send more. Save the posts, messages and addresses, contact the exchange you sent from, and report it to the FBI at ic3.gov and the FTC. How tracing works.

Hacked account scam statistics

In a case prosecuted in Virginia, conspirators who hijacked digital artists' X accounts in 2022 defrauded over 200 victims and profited over $794,000 within a few days. (source)

Request a case review

This guide is general information, not legal or financial advice. ChainWatch is not a law firm and does not guarantee fund recovery.

Sources

The information on this page was checked against the sources listed in September 2026. Laws, agency guidance, company policies and contact details change, so please verify the current information with the original source before you act.