033 - Online Friends Should Stay Online Until Verified

May 30

“Be careful with anyone pushing to meet in person quickly. If you ever decide to meet someone from online, involve trusted adults and meet only in safe, public places.”

Scammers Often Pretend To Need Help

You’re hanging out on Discord, checking your Insta requests, or chillin' in a group chat when a message drops from a friend. “Hey, I’m completely locked out of my account and need to receive a verification code to get back in. Can I send it to your phone real quick?” Because it’s your friend, your automatic instinct is to say, "Yeah, of course, no problem." You want to look out for your crew. But in the digital world, you have to hit the brakes: scammers love to play the victim to catch you off guard.

The Trap Behind the Favor

Cybercriminals know that if they slide into your DMs acting like a tough guy or demanding your password, you’ll probably block them. So, they change up their strategy. They use hijacked accounts—meaning they’ve already hacked one of your actual friends—to impersonate them.

When they ask you to receive a code or click a link to "help" them recover an account, vote for their gaming team, or fix a glitch, it’s a trap. The second you hand over that text code or log into that sketchy link, you aren't helping your friend at all. You are giving a stranger the keys to your own profile. Within minutes, they’ll lock you out, read your DMs, and start spamming the exact same "help me" scam to everyone on your follower list.

Your Best Friend Defense Plan

You don't need to stop being a supportive friend to stay safe. You just need to change how you verify the situation:

Go Off-Script: Never handle an unusual or urgent favor on the app where you received the message. If a friend asks for help on Discord, text their phone number or call them directly. Ask, "Hey, did you just send me a weird request?" * Never Forward a Code: Treat verification codes sent to your phone like a personal banking PIN. If someone asks you to screenshot or read a text code back to them, it is a 100% scam.
Don't Click to Vote or Help: If an online acquaintance asks you to click a link to "help them out," ignore it. Legitimate apps never require a third party to recover someone else's account.

If you ever accidentally bite the bait and get locked out, don't sweat it alone. Reach out to a parent, or get free, completely private support through a safety community like Technoactivism. Double-check the story, protect your keys, and keep your accounts safe.

What Now

If you have accidentally shared a verification code, clicked a suspicious link from a friend's profile, or believe one of your accounts has been hijacked by an online imposter, you need to act quickly to cut off their access. Grounded in recovery frameworks from leading digital safety non-profits like the National Cybersecurity Alliance and the Cybercrime Support Network, follow this immediate action plan:

Force a Global Session Logout: If you still have access to the account, immediately navigate to your security or privacy settings. Look for an option that reads "Sign Out of All Other Devices," "Log Out of Active Sessions," or "Manage Devices" and select it to instantly boot the scammer off your profile.
Change Your Passwords Instantly: Create a strong, completely unique password or passphrase for the compromised account. If you happen to reuse that same password for other critical apps—like your email, Discord, Snapchat, or gaming profiles—change those passwords immediately as well to prevent a chain-reaction hack.
Audit and Reset Recovery Info: Check your account settings to ensure the intruder hasn't changed your recovery options to lock you out later. Verify that your actual phone number and email are correct, and delete any unfamiliar backup emails, linked phone numbers, or unrecognized third-party apps the scammer may have connected.
Warn Your Friends and Group Chats: Scammers move fast to use hijacked profiles to target everyone on your friends list with the exact same "help me" or "free loot" scam. Send a quick text or alert through a different app to warn your friends not to click any links or share codes coming from your compromised handle.
Loop in a Trusted Adult: Cybercriminals rely on making you feel too isolated or embarrassed to ask for help. Break their power by talking to a parent, caregiver, favorite teacher, or school counselor who can back you up, help verify your security settings, and ensure your digital identity stays safe.