Hacked Friend's Account Asking for Urgent Money
A message from a friend's hacked or cloned profile asks for urgent UPI money. Learn how to check whether the person is really your friend.
A friend writes on Instagram or Facebook: 'Bro, are you free? I am stuck, my card is blocked, can you send Rs 8,000 on UPI? I will return tonight.' The profile photo, name and style match. But the account may be hacked, or a copy made with the same photo and a slightly different name. The money you send goes to a stranger's account, and your real friend knows nothing about it.
How the scam works
The scammer either takes over a friend's account through a stolen password or fake login page, or he makes a clone profile using public photos and the same name. He then messages the friend list. Because everything on the profile looks familiar, including old posts and mutual friends, people do not think of a trick. The first message is brief and casual, often 'busy?' or 'can you help me?'
The pressure is an emergency. After you reply, he explains a stuck payment, a hospital bill, a flight issue or an exam fee, and says he will repay in a few hours. He avoids a voice call by saying he is in a meeting, in a bad network area or that his phone mic is broken. He sends a QR code or a UPI ID belonging to someone else, with the excuse that it is a cousin's account.
The payoff is the transfers from friends who trust him. Often one account victimises dozens of contacts in a day, each sending a few thousand rupees. If you ask a test question, he disappears. The real owner is locked out or cloned, and takes days to regain access. Each victim then feels embarrassed and may not report, which helps the scammer repeat the trick.
An example of what you may see
Example Instagram chat (invented): 'Hey, are you there? Please help me out, I am at a hospital and my card is blocked. Can you send Rs 7,500 to my cousin's UPI right now? I will return it tonight, promise. I cannot call, the network here is bad. Please don't tell anyone, I am embarrassed.' When you ask which hospital, the replies stop, and a new message repeats the plea with a QR code image.
This example is written for illustration. Real messages change their wording, names and links all the time.
Red flags
- A friend asks for money urgently by chat but refuses a voice or video call.
- The UPI name or ID belongs to someone other than your friend.
- The message is short, hurried and a little out of character.
- You are asked to keep it secret.
- The profile is new or has a slightly different handle from the usual one.
- The same plea is being sent to many of your mutual friends.
What to do right now
- Call your friend on his normal number before sending anything.
- Ask a private question that only he would know.
- Check the profile handle carefully for small differences.
- Never send money to an unknown UPI name because 'it is his cousin'.
- Tell mutual friends and report the profile to the platform.
If you already paid or shared a code
- Call 1930 and report at cybercrime.gov.in with the UPI reference.
- Tell your bank through its official app and note the payee name.
- Tell your real friend so he can secure his account and warn others.
- Save screenshots of the chat and the profile before the account is removed.
National Cyber Crime Helpline: 1930. Report online at cybercrime.gov.in. Do it fast: the sooner your bank is told, the better the chance that money can be held.
Where this scam shows up
Read how it looks on each channel:
How Safeavio helps
Money Shield in Safeavio Sentinel has trusted contacts and a family code word, so you can test a request by asking for the word before sending money. Paste the chat into Scam check to see the reasons it looks risky, such as urgency and a secret request. Safeavio cannot confirm whether a social media account has been hacked, and cannot get money back once sent.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions people ask
How can I be sure a friend is really asking for money?
Call him on his usual number or ask a private question. A real friend will understand the check. Refusal to talk, a different payee name and pressure to act fast point to a scam. Even a short call of ten seconds is enough to hear a familiar voice and settle your doubt before any money moves.
Why do hacked accounts target friends?
People trust names they know and respond quickly. One compromised profile gives the scammer a ready list of friends who are likely to help. That trust is exactly why a hacked profile works so well, so a quick check should become a habit for every money request.
What should I do if my own account is hacked?
Warn friends through another channel, change your password, log out of all devices and use the platform's recovery steps. Switch on two-step login with an authenticator app or SMS where available. Tell your own contacts too, so nobody replies to messages sent from your account while you recover it.