That Facebook Message Might Not Be Who You Think — Scammers Are Getting Much Better at This

Maybe it’s a relative asking for a quick favor. Maybe it looks like a friend who has changed their number. Maybe it is someone claiming to be from a company, bank, or even law enforcement.

The profile picture looks right. The name looks familiar. The message sounds believable.

And that is exactly why these scams are becoming harder to spot.

Federal agencies are warning that impersonation scams increasingly use social media, messaging apps, fake profiles, spoofed websites and even AI-generated content to make fraudulent messages look more convincing than they used to. The FBI recently warned that scammers are creating fake social-media personas and even AI-generated videos to impersonate trusted organizations and people.

The scam often starts with something small

One of the most effective tricks is also one of the simplest.

Instead of immediately asking for thousands of dollars, a scammer may begin with a believable request:

“Can you do me a quick favor?”

That might lead to a request for a gift card, money transfer, account information, a verification code or a link they want you to click.

The Federal Trade Commission says scammers frequently pose as bosses, family members, businesses and government agencies, often creating urgency so the victim acts before checking whether the request is real.

A message from a family member might claim there is an emergency.

A fake boss may say they are stuck in a meeting and urgently need gift cards.

A fake bank may claim your account has been compromised.

Different story. Same basic goal: get you to act quickly.

Why these messages are getting harder to recognize

The old stereotype of a scam message full of obvious spelling mistakes is increasingly outdated.

Scammers can copy profile photos, names and information people have posted publicly online. They can create fake accounts that closely resemble legitimate ones.

And AI has added another layer.

The FBI says scammers are using AI-generated voice messages and videos to impersonate real people and make fraudulent communications appear more credible. In some cases, AI-generated voices can sound extremely similar to the person being copied.

That means simply thinking:

“That sounds like them.”

is no longer enough.

Impersonation scams are costing Americans billions

This is not a small problem.

FTC data released in 2026 shows consumers reported losing approximately $3.5 billion to impersonation scams in 2025.

Impersonation was the most commonly reported fraud category, accounting for nearly one in three fraud reports received by the FTC. Consumers reported nearly $1 billion in losses to business impersonators alone, while losses involving government impersonators reached roughly $920 million.

And those figures only represent losses that were actually reported.

The biggest warning sign may be urgency

Scammers do not want you to think.

They want you to react.

A suspicious message may tell you:

• something terrible will happen if you don't act immediately
• an account will be frozen
• someone is stranded or in trouble
• a payment must be made right now
• you must keep the request secret
• you need to move the conversation to another app

The FTC specifically warns that scammers often create urgency and may tell victims not to discuss what is happening with anyone else.

The moment someone pressures you to act before verifying who they are, that should raise a red flag.

Gift cards are an especially important warning sign

A request for gift cards should immediately make you suspicious.

The FTC's advice is straightforward: gift cards are for gifts, not payments.

Scammers may ask someone to purchase cards and then send the numbers and PIN from the back. Once those details are provided, the money can be taken quickly and may be difficult to recover.

This can happen even when the person asking appears to be someone you know.

If your "friend," "boss" or "relative" unexpectedly asks you to buy gift cards, verify the request another way before doing anything.

Don't verify the message by replying to it

This is one of the most important habits to learn.

Imagine you receive a Facebook message that appears to be from your sister asking for $200.

Don't reply:

“Is this really you?”

You're still communicating with whoever controls that account.

Instead, contact your sister through a completely separate channel that you already trust.

Call her usual phone number.

Send a message through your normal family group chat.

Ask another family member.

The FTC recommends contacting the person or organization independently using contact information you already know is legitimate.

A 30-second phone call could save you hundreds or thousands of dollars.

Be careful with unexpected links

Another common tactic is convincing the victim to click a link.

It might supposedly:

• verify your account
• show you a document
• move the conversation somewhere else
• confirm a payment
• recover lost money
• fix a security problem

But the link may lead to a fake login page or a website designed to collect personal or financial information.

The FTC advises consumers not to click links in unexpected emails, texts or social-media messages when they are unsure who actually sent them.

Even official-looking accounts can be fake

A verified-looking logo or professional profile photo is not proof.

The FBI has documented cases of criminals creating fake social-media profiles that impersonate government personnel. In one recent scheme, scammers contacted previous fraud victims through Facebook Messenger while pretending to represent the FBI's Internet Crime Complaint Center.

That is an especially cruel form of fraud: targeting someone who has already lost money and pretending to help them recover it.

The FBI says its IC3 program does not contact people through Facebook, Telegram or similar platforms to recover money.

Five things to do when a message feels wrong

Before sending money, sharing information or clicking anything:

Stop for a moment. Urgency is often part of the scam.

Contact the person separately. Use a phone number or account you already know.

Never send gift-card numbers or PINs.

Don't click unexpected links.

Be suspicious of secrecy. A legitimate friend, company or agency shouldn't need you to hide the conversation.

The strongest defense is often simply creating a little distance between receiving the message and acting on it.

What if you've already sent money?

Act quickly.

If you sent a gift card, contact the company that issued the card immediately and keep the card and receipt.

If you transferred money through a bank or payment service, contact the provider as soon as possible and explain that the transaction was fraudulent.

The FTC also recommends reporting suspected fraud through its fraud-reporting system, while internet-enabled crimes can be reported to the FBI's IC3.

The bottom line

Scammers no longer need to create an obviously fake email from a stranger.

Sometimes all they need is the name and photo of someone you trust.

As fake profiles, AI-generated voices and sophisticated impersonation techniques improve, recognizing scams increasingly comes down to one habit:

Verify before you act.

If someone you know suddenly asks for money, gift cards, passwords or sensitive information through Facebook Messenger or another messaging app, contact them separately first.

The message may look familiar.

That doesn't necessarily mean the person behind it is.