SOCIAL-MEDIA SAFETY CHECKS

Verify the account before you trust the request.

Work through these checks before sending money, sharing information, clicking links, signing in or giving someone access to an account.

A familiar profile is not proof of identity.

Social-media scams can involve fake profiles, impersonation, compromised accounts, copied pages, fraudulent businesses and messages designed to create trust quickly.

A profile photo, verification-looking badge, follower count, familiar name or message from an apparently known person does not automatically prove who is behind the account.

What should I never share?
Never provide passwords, OTPs, PINs, recovery phrases, private keys, full bank-card details or other secrets that could give someone access to your accounts, identity or money.
What if the account belongs to someone I know?
Verify important or unusual requests through another trusted channel. For example, contact the person using a phone number or other contact method you already know rather than replying only through the suspicious account.
SOCIAL-MEDIA VERIFICATION

Check the account before acting.

The more important the requested action, the more important independent verification becomes.

Who owns the account?

Identify the person, business, organisation or public figure the account claims to represent.
Why this matters
A familiar name, profile photo, logo or biography does not prove that an account is authentic. Impersonators can copy public information and create convincing profiles.

Is the profile authentic?

Check whether the account's identity, history and other available information are consistent with a genuine profile.
Why this matters
New accounts, unusual profile changes, copied content or inconsistent information can indicate that an account deserves additional verification.

Could someone be impersonating them?

Be cautious when an account suddenly contacts you while claiming to be someone you know, a company representative or a public figure.
Why this matters
Impersonation can be used to request money, sensitive information, account access or other actions from people who trust the identity being presented.

Is the request unusual?

Pay attention when an account suddenly asks for money, personal information, account access, votes, codes or another unusual action.
Why this matters
An unusual request should be independently verified even when it appears to come from someone familiar.

Are they creating urgency?

Be cautious when you are told to act immediately, keep the conversation secret or risk losing an opportunity if you wait.
Why this matters
Pressure reduces the time available to verify who is actually behind the account and whether the request is genuine.

Are they asking for money?

Verify requests for transfers, donations, investments, purchases, loans or other payments independently before sending money.
Why this matters
An impersonator can use a trusted person's identity to make a payment request appear legitimate. Confirm important requests through a channel you already know.

Are they asking for a secret?

Never send passwords, OTPs, PINs, recovery phrases, private keys or other authentication secrets through social media.
Why this matters
These secrets can provide access to accounts, money or digital assets. A legitimate social-media conversation should not require you to surrender them.

Are they sending a suspicious link?

Treat links sent through social media carefully, especially links asking you to sign in, claim a reward, make a payment or download something.
Why this matters
A link can lead to a fake login page, malicious download or fraudulent payment destination even when the message appears to come from a familiar account.

Can you verify them another way?

For important requests, contact the person or organisation through a trusted channel that you already know rather than using the contact details supplied by the suspicious account.
Why this matters
Independent confirmation helps distinguish a genuine account from an impersonator controlling a copied or compromised profile.

What evidence should you preserve?

Keep useful records such as the profile, username, messages, links, payment instructions, screenshots and other relevant information.
Why this matters
Preserving evidence can help when an account needs to be reported or when a suspicious interaction becomes an incident.
Before trusting an important social-media request.
1. Verify the identity
Confirm who is actually behind the account rather than relying only on the profile information presented to you.
2. Verify the request
Ask whether the requested action is genuinely expected and appropriate.
3. Verify independently
Use a trusted contact method that you already know, especially when money, credentials or sensitive information is involved.
4. Protect your secrets
Never give someone authentication secrets simply because they claim to be a friend, business, support agent or other trusted person.
5. Preserve evidence
Keep useful records if the interaction becomes suspicious or an incident occurs.
Trust the person—not just the profile.

Social-media accounts can be copied, impersonated or compromised. When money, credentials, identity or sensitive information is involved, verify the request through a trusted independent channel before acting.

VERIFY BEFORE YOU TRUST.