Pauline Smith, Head of Action Fraud, emphasized the vulnerability posed by the widespread use of social media applications, making millions of users potential targets for cybercriminals. She urged individuals to prioritize account security, recommending the adoption of strong and distinct passwords, along with the implementation of 2-step verification. In nearly half of the reported cases, two primary types of account takeovers were identified

On-Platform Takeovers: These occur within the platform's messaging service, where a fraudster tricks victims into sharing critical account details by posing as a friend. The criminal gains control by already having access to a friend's compromised account.

Email Compromise and Phishing: Victims unknowingly disclose login details to fake websites through phishing emails. Once fraudsters have access to the victim's email account, they can reset passwords for associated social media accounts.

To avoid falling victim to such scams, individuals are advised to:

Use Strong and Different Passwords Employ robust and unique passwords for email and social media accounts, making them distinct from other passwords.


Activate 2-Step Verification (2SV): Enhance security by enabling 2SV for email and social media accounts, requiring additional identity verification steps when signing in or making changes.

With cyber threats on the rise, maintaining vigilance, adopting secure practices, and promptly reporting suspicious activities are crucial steps in safeguarding against online scams. Victims in England, Wales, and Northern Ireland can report fraud or cybercrime to www.actionfraud.police.uk or call 0300 123 2040.

In Scotland, report incidents to Police Scotland on 101. Suspicious emails should be forwarded to SERS at report@phishing.gov.uk.

Action Fraud: Protect Yourself from Social Media Hacking

Image of Shield with a Lock
Image of Shield with a Lock

Action Fraud is alerting the public to the growing threat of social media and email takeover scams, urging individuals to enhance their online security practices. Recent data from August 2022 to July 2023 reveals a staggering 18,011 reports of social media and email hacking, with 4,092 victims reporting extortion or fraudulent activities.

Among the reported incidents, there were cases where hacked social media accounts were exploited to promote counterfeit event tickets, such as fake Taylor Swift concert tickets. The sheer volume of friends and historical posts on the compromised profiles made it difficult for victims to discern the scam.

News Letter will Update More Soon