Social Media Scams: How to Spot Them and Stay Safe

Social media scams cost UK consumers hundreds of millions of pounds every year, and the tactics keep changing faster than most people can keep up with. According to UK Finance’s Annual Fraud Report, published in June 2026, authorised push payment fraud, the category that covers most social media scams, rose 19% in 2025 to £576.4 million, with two-thirds of cases starting online. This guide walks through the most common social media scams operating on Facebook, Instagram, X, TikTok, and Threads today, the warning signs that give them away, what to do if you’ve already lost money, and whether UK banks are required to refund it.

What Are Social Media Scams?

A social media scam is any deliberate attempt to trick someone into handing over money, personal details or account access through a social networking platform. That can mean a fake profile sending a friend request, a direct message with a malicious link, or a slick advert for an investment that doesn’t exist. Social media scams work because platforms are built around trust and quick decisions, which is exactly what fraudsters rely on.

The scale of the problem is significant. UK Finance’s 2026 report found that investment fraud losses climbed 40% year on year to £221.5 million, romance fraud losses rose 23% to £39.2 million, and purchase scams, many of them starting with a social media advert or marketplace listing, accounted for 71% of all authorised push payment cases. Criminals are not slowing down, and social platforms remain their preferred hunting ground.

Why Social Media Scams Work

Understanding the psychology behind social media scams makes them far easier to spot. Fraudsters lean on a handful of proven pressure tactics rather than reinventing the wheel each time.

Urgency is the most common lever. A message that demands action “right now” or warns that an offer expires in minutes is designed to stop a victim from pausing to think. Social proof works in a similar way: seeing that other people have supposedly already invested, won a prize or trusted a seller makes the scam feel safer than it is.

Scammers also exploit familiarity, since a message that appears to come from a friend, family member, or a brand a person already trusts lowers their guard far more than a message from a stranger. Even experienced, careful people fall for well-constructed social media scams because the manipulation targets normal human decision-making rather than a lack of intelligence.

Common Types of Social Media Scams

Social media scams take many forms across different platforms, but most fall into a handful of recognisable categories. The sections below cover the scams currently causing the most harm to UK users, from long-standing tricks to newer, AI-driven threats.

Friend Request and Fake Profile Scams

Scammers create fake profiles, often using stolen photos, and send friend or connection requests in bulk. Once accepted, they gain access to personal details, photos, and a list of mutual contacts, which can be used to make future scams appear more convincing. Declining requests from people you don’t know in real life remains one of the simplest ways to shut this down.

Phishing Messages

Phishing messages pretend to come from a friend, a bank or a well-known brand and usually contain a link designed to steal login details or install malware. On social media, these often arrive as direct messages rather than emails, which makes them easy to mistake for a genuine conversation. If you’ve already clicked a suspicious link, our guide on what to do if you click a phishing link covers the steps to limit the damage.

Romance Scams

Romance scams involve a fraudster building a relationship, sometimes over weeks or months, before inventing a crisis that requires money. UK Finance’s data shows romance fraud losses rose 23% in 2025, and cases increasingly begin on mainstream social platforms rather than dedicated dating apps. A partner who avoids video calls, always has an excuse for cancelled meetings, or eventually asks for money is showing textbook signs of a romance scam.

Investment and Crypto Scams

Investment scams promise high, guaranteed returns and usually appear as adverts or posts from accounts claiming insider knowledge. Investment fraud losses grew faster than any other category in 2025, up 40% according to UK Finance. Cryptocurrency investments are especially attractive to scammers because payments are hard to trace and reverse once sent.

Job Offer Scams

Unsolicited job offers that promise high pay for minimal work or require upfront payment for training or equipment are a common social media scam aimed at people actively job hunting. Legitimate employers do not ask candidates to pay for the privilege of working for them.

Lottery, Prize and Sweepstakes Scams

These scams claim the recipient has won a prize or lottery they never entered, and ask for a fee or personal details to release it. Genuine competitions and lotteries never require an upfront payment to claim a prize.

The “Look Who Died” and Account Takeover Scam

This scam arrives as a direct message, often from a compromised account of a real friend, claiming that a mutual contact or celebrity has died and linking to a fake news article. Clicking the link leads to a convincing but fake login page that steals the victim’s username and password, allowing the scammer to take over the account and send the same message to everyone on their friends list. Because the message appears to come from someone genuinely known to the victim, it spreads unusually quickly.

AI Deepfake and Cloned Voice Scams

AI-generated voice and video are now being used to impersonate family members, celebrities and business executives on social media. Research from Starling Bank found that 28% of UK adults believed they had been targeted by an AI voice-cloning scam in the year to August 2024. In another case, a UK engineering firm’s Hong Kong office lost around £20 million in 2024 after a finance employee joined a video call in which every other participant, including the apparent CFO, was AI-generated.

On social platforms, the same technology is used to fake celebrity endorsements of investment schemes. It is also used to clone a relative’s voice in an urgent request for money. Agreeing a private code word with close family can help reduce the risk. You should also verify any urgent financial request through a separate communication channel before taking action.

TikTok Shop and Threads Scams

As newer platforms and features grow, scammers follow the audience. On TikTok Shop, fraudulent sellers list unrealistically cheap goods, take payment, and never deliver or send counterfeit items that don’t match the listing. On Threads, phishing and impersonation scams have started to mirror tactics already established on Instagram and X, including fake verification offers and cloned brand accounts. Treating a new or less familiar platform with the same scepticism as an established one is the simplest way to avoid being an early target.

Warning Signs of a Social Media Scam

Most social media scams share a small set of warning signs, regardless of the platform or the specific story being used. Learning to recognise these patterns is more useful than memorising every individual scam type, since fraudsters constantly invent new variations on the same core tricks.

• An unsolicited message, friend request or investment opportunity from someone you don’t know
• Pressure to act immediately, or a claim that an offer will expire within minutes or hours
• A request for money, gift cards, cryptocurrency or personal information from a new contact
• Promises of guaranteed returns, free prizes or unrealistically cheap goods
• Poor spelling, inconsistent details, or a profile that was only recently created
• A refusal to meet in person or appear on an unscripted video call

How to Avoid Becoming a Victim

Avoiding social media scams comes down to a few consistent habits rather than a single trick. Before clicking a link or making a payment, check the actual URL rather than the link text, since scammers often disguise fraudulent web addresses behind familiar-looking brand names. Verify a company or seller through its official website rather than a link sent on social media, and be sceptical of any offer, romance or investment opportunity that seems better than anything you’d find elsewhere. Declining friend requests from strangers and treating any request for money or personal details from a new online contact as a red flag closes off the two most common entry points fraudsters use.

It also helps to slow down before responding to anything unexpected, even from an account that looks familiar. If a friend, relative or well-known brand suddenly asks for money, personal details or a one-time passcode, contact them through a different channel, such as a phone call to a number you already have saved, rather than replying in the same conversation where the request appeared. This single habit defeats most account takeover and impersonation scams, because it removes the assumption that the account itself proves who’s really behind it.

What to Do If You’ve Been Scammed

Acting quickly after a social media scam significantly improves the chance of limiting the damage and, where the rules allow it, recovering the money.

The First 30 Minutes

Contact your bank immediately to report the payment and ask them to attempt a recall, since banks can sometimes intercept a transfer before it reaches the scammer. Change the password on the affected social media account and on any other accounts that share the same password, and enable two-factor authentication if it isn’t already active.

Take screenshots of the scammer’s profile, messages, and any payment confirmations before the account or content disappears, as this evidence will be needed by both your bank and the police. If the scam involved a shared bank detail, passcode or copy of ID, also check your credit report over the following weeks for accounts or applications you don’t recognise.

Reporting the Scam

Report the incident to Action Fraud, the UK’s national reporting centre for fraud and cybercrime, either online at reportfraud.police.uk or by phone on 0300 123 2040. Our guide to what cyber fraud is and how Action Fraud’s reporting tool works explains the process in more detail. You should also report the scam directly to the social media platform, since this helps get fraudulent accounts removed and can prevent other people from being targeted by the same profile. If personal information such as your address or date of birth was shared, consider registering with an identity theft protection service to monitor for misuse.

Will Your Bank Refund You? UK Rules Explained

One of the most common questions after a social media scam is whether the money can be recovered, and the honest answer depends on how the payment was made.

Authorised vs Unauthorised Payments

An unauthorised payment, such as a stolen card being used without your knowledge, has always carried strong legal protection, and banks are generally required to refund the full amount. An authorised push payment scam is different: the victim is deceived into sending the money themselves, believing at the time that the transfer is legitimate. Historically, this made recovery far less certain, since the payment technically went through with the account holder’s own consent, and refunds were only ever offered under a voluntary code that not every bank had signed up to.

The PSR Reimbursement Rules Explained

Since 7 October 2024, the Payment Systems Regulator’s mandatory reimbursement rules have required banks to refund victims of authorised push payment fraud on Faster Payments and CHAPS transfers, up to a maximum of £85,000 per claim. Banks must usually decide a claim within five business days, extendable to 35 business days in more complex cases, and may apply an excess of up to £100 per claim, except for customers classed as vulnerable.

According to the Payment Systems Regulator’s consumer guide to APP fraud reimbursement, the cost of reimbursement is shared between the sending and receiving banks, which gives both sides a financial incentive to prevent the fraud in the first place. UK Finance reports that £354.3 million was reimbursed to victims in 2025, covering 89% of in-scope claims, though the rules do not currently extend to international payments or payments made outside Faster Payments and CHAPS. To claim, report the fraud to your bank within 13 months of the final payment and be prepared to share evidence such as messages or screenshots from the scam.

Tips to Stay Safe on Social Media

Reducing your exposure to social media scams is largely about tightening the everyday settings and habits most people set up once and never revisit. Review your privacy settings on each social media platform regularly, since default settings are often more open than most users realise, and restrict who can see your posts, friends list and contact details to people you actually know. Use a password manager to create a unique password for every account, so that a breach on one platform doesn’t put the rest of your accounts at risk. Our digital security checklist covers two-factor authentication, dormant account clean-up and other practical steps in more depth.

Be cautious about which third-party apps you connect to your social media accounts, and remove any you no longer use, since forgotten integrations can be a quiet route to data exposure. Finally, only buy from verified profiles and established brands, checking for genuine reviews, a real contact address and a sensible price before paying, particularly on newer shopping features such as TikTok Shop, where seller history can be harder to verify.

Staying safe from social media scams isn’t about avoiding social media altogether; it’s about applying the same scepticism online that most people already use in everyday life. If you’ve spotted a scam pattern we haven’t covered here, let us know in the comments so we can help other readers watch out for it too.

FAQs