Social Media Account Takeover

Did you receive an unexpected text message that contains a multi-factor authentication (MFA) code and there appears to be a customer support number for you to call if you did not request the code? These MFA codes are usually only sent to you when you are logging into an account. Receiving this message might make you think an unauthorized person is trying to access your account. This happens to be one of the recent scams going around.

The message may seem legitimate, but this is actually a text message phishing attack (smishing). A cybercriminal sent this message and the phone number provided in the text message will not actually connect you with the customer support member. If you call the number, the call will be answered by a cybercriminal. They will request that you provide them with your user credentials or other personal information for them to help you. They are actually collecting this information so that they can steal your account!

Tips to avoid falling victim to a smishing scam:

• Be suspicious of unexpected text messages, especially if they seem urgent.
• Be wary of messages from strange phone numbers you don’t recognize. If you need to contact customer support for one of your accounts or services, always use the contact information listed on their official website.
• Remember that scammers often use alarming language to try to trick you into acting impulsively. Do not click on links or call numbers listed in unexpected texts. Always stop and think before you click!

Back