Scam Scanner

Social Media Scams

Written & reviewed by Reuben Schultz, FounderLast updated 1 October 2026

The 'Hi Mum' text is one of the best-known versions: a message from an unknown number claims to be your child or parent on a new number after a lost or broken phone, then asks for money. The same playbook runs across social media and messaging apps: fake 'your account will be disabled' and 'verify your account' warnings, fake recruiters, six-digit code requests, Marketplace buyer and seller tricks, and a friend's hacked account asking for help.

This guide explains how the scam works, the warning signs to watch for, and what to do if you've been caught out. Got a specific message in front of you? Check it now and get an instant verdict.

How this scam works

Start with the 'Hi Mum' text, one of the best-known versions. In a 2022 release, the ACCC's Scamwatch described a family impersonation scam in which a scammer, most often on WhatsApp, poses as a family member or friend, says they have lost or damaged their phone and are writing from a new number, then asks for personal information or money to urgently pay a bill or replace the phone. ACMA says the sender greets you as 'mum' or 'dad', writes with a sense of urgency and urges you to reply by SMS or WhatsApp, and has warned of a more convincing variation that labels the sender as 'Mum' or another family member on your phone. A saved name is not proof of who is writing: cyber.gov.au says scammers can disguise their name so they appear to be someone you have saved in your contacts, like 'mum' or 'dad'. The same playbook runs across social media. Instagram says phishing messages may claim your account will be banned or deleted, and Facebook describes a phishing email claiming to come from Meta that raises issues with your account and asks you to click a link immediately. Meta also says scammers may compromise existing accounts to deceive or defraud you or your friends out of money, personal information or access to your accounts. LinkedIn says job scams typically involve people pretending to be recruiters or employers offering high-paying jobs for little work, and Meta says Marketplace scams can happen to both buyers and sellers. WhatsApp says someone trying to take over an account needs the SMS verification code sent to your number, which is why that code should stay with you. None of the surface details proves who is on the other end, so the useful test is what a message asks you to do: send money, pay a fee, click to save an account, or read out a code. The check that holds up is to contact the person on the number already saved in your phone, or to open the app yourself.

What the scam looks like

These composed examples show how the scam typically reads, with the tells that give each one away. Compare them against anything you've received.

Example scam text messageExample only. Not a real message.

Hi Mum, it's me. I dropped my phone in the pool, so this is my new number, 0400 000 000. Can you WhatsApp me on it? I have a bill due today and I can't get into my banking app on the old phone. Could you pay it for me and I'll transfer it back tomorrow x

What gives it away:

  • A new number, a lost phone and urgency match the pattern ACMA and the ACCC describe; the warm tone is part of the script
  • The banking-app excuse explains why you are asked to pay; the ACCC says the funds are justified by claiming they can't access their online banking temporarily
  • Call the number already saved in your phone first; ACMA advises this, and the ACCC says that if they pick up, you know it's a scam
Example scam social media messageExample only. Not a real message.

Message from 'Meta Community Support': 'We have detected repeated violations on your page and it will be restricted in 12 hours. If you believe this is a mistake, request a review now at page-review-centre[.]example. Failure to complete the form will result in permanent loss of your followers.'

What gives it away:

  • Instagram describes phishing messages that claim your account will be banned or deleted; the 12-hour countdown is the same pressure
  • Instagram says it won't send you direct messages about your account in the Instagram app, and Facebook says not to click links or attachments in a suspicious message claiming to be from it
  • Open the app yourself and check your account status and settings rather than using the link
Example scam social media messageExample only. Not a real message.

A Marketplace message after you list a bike for $400: 'Hi, I'll take it! I've paid $460 by bank transfer, screenshot attached. I added $60 by mistake for the courier. Please send the $60 back and I'll organise pickup this afternoon.'

What gives it away:

  • A screenshot is not a payment; Meta says you should not trust screenshots of payments as confirmation
  • An 'accidental' overpayment with a request to send the difference back is a payment scam Meta lists for Marketplace sellers
  • Check your own banking app for the money before you hand over the item or refund anything

Who gets targeted, and when

Anyone with a phone and a family, which is nearly everyone, so a 'Hi Mum' text can be sent at random and still land on a real parent. In a 2022 release, the ACCC's Scamwatch said 82 per cent of family impersonation scams were reported by people over the age of 55, accounting for 95 per cent of all reported losses.

A lost-phone story fits any day of the year, but the 'Hi Mum' scam has come in waves. The ACCC said the vast majority of the reports behind its 2022 warning came in June and July of that year, and ACMA warned in January 2024 that reports were increasing again.

How to spot it

  • A message from an unknown number, or a 'new number' for someone you know, that opens 'Hi Mum' or 'Hi Dad', says a phone was lost or broken, and asks you to reply on the new number
  • A warning that your account will be banned, disabled or deleted unless you click or log in; Facebook lists threats or urgent demands, such as 'Do this now or we'll close your account', among the signs of phishing
  • A request to read out or forward a six-digit code; WhatsApp says you should not share your registration code with others, not even friends or family
  • A recruiter who contacts you unexpectedly by text or messaging app, offers high pay for little work, skips a real interview or asks for a recruitment fee; Scamwatch lists each as a warning sign
  • A push to move the conversation off the platform; Facebook and LinkedIn both list it as a warning sign
  • A push to move the conversation off the platform, which Facebook and LinkedIn both list as a warning sign
  • A message from a friend's real account that seems out of character; eSafety says to ring or visit your friend to see if they really sent it

What to do if you have been targeted

  1. If you sent money, call your bank immediately on a number you know to be real, or go into a branch; eSafety gives this advice, and the ACCC says your bank may be able to find where the money went
  2. If a scammer has your WhatsApp account, re-register it with the six-digit code sent to your own number; WhatsApp says that is the only way to remove someone who has taken over
  3. For a hacked Facebook account, Meta says to visit facebook.com/hacked on a device you've used to log in before; for Instagram or LinkedIn, use the platform's own recovery steps
  4. Warn friends and family through another channel; WhatsApp says a person using a compromised account could impersonate its owner in chats and groups
  5. Change the password, here and anywhere you reused it, and turn on two-factor authentication
  6. If you shared identity details, contact IDCARE (idcare.org); report to Scamwatch (scamwatch.gov.au), and to ReportCyber (cyber.gov.au) if you lost money

Where to report it

  • Scamwatch — Report the scam to the ACCC's national scam service.
  • ReportCyber — Report cybercrime and financial loss to the police.
  • ACMA — Complain about scam texts and spam SMS, email or calls.
  • Forward to 7226 (SCAM) — Forward the scam SMS to short code 7226 so carriers can block the source.
  • IDCARE — Free identity and cyber support if your details were taken.

How to protect yourself

  • Before replying to any 'new number' message, call the person on the number already saved in your phone; ACMA says not to reply directly to the message
  • Agree a family code word that only your household knows; ANZ suggests asking for it if someone claims to be a family member
  • For anything about your account, open the app yourself instead of using a link; Facebook says you can view recent emails sent from Facebook in your Facebook settings
  • Turn on two-factor authentication; Facebook calls it one of the most effective tools for combating account compromise attempts
  • Check job offers independently, through contact details you find yourself, because Scamwatch says a job ad isn't real just because it appears on a trusted platform
  • On Marketplace, confirm payment in your own banking app, and be wary of deposits or paying in advance; eSafety advises being cautious of deals that seem too good to be true
  • Forward scam texts to 7226 (spells SCAM), then delete them, and report scam accounts inside the app

Social Media Scams in 2026

Warnings haven't retired the 'Hi Mum' text. ACMA has described a variation that labels the sender as a family member on your phone, and IDCARE said that three years after the first messages were reported in Australia, scammers continue to exploit the emotions of parents. The AFP has warned about fake 'side hustle' job ads built around simple online tasks, shared on social media platforms and messaging apps.

Related brands targeted by this scam

Scammers often impersonate these names in social media scams. Here's how to tell a genuine message from a fake:

Check a suspicious message now

Paste the text or email you're unsure about and get an instant verdict — social media scams included, free.

Check your message nowGet the iPhone app

See all free scam checker tools →

Frequently asked questions

Is the Hi Mum text a scam?

Treat it as a scam until you have checked. A message that opens 'Hi Mum' or 'Hi Dad' from a number you don't recognise, says a phone was lost or broken and asks you to message a new number is the pattern ACMA and the ACCC have warned about. ACMA says not to reply directly to the message, and to call or contact your relative on the number already stored in your phone to confirm whether it's real.

What should I do if I replied to a Hi Mum message or sent money?

Stop replying and contact your bank straight away. The ACCC says your bank may be able to find where the money went and block scam accounts, and ACMA says to tell your financial institution and phone provider as quickly as possible. If you shared personal information, IDCARE (idcare.org) can help. Warn the real family member too.

How can I tell if a new-number message is really from my child or parent?

Don't use the message to check. The ACCC suggests calling them on the number already stored in your phone, trying a secondary contact method if you can't reach them, then asking a personal question a scammer couldn't know the answer to. A family code word that only you and your loved ones know, as ANZ suggests, gives you something to ask for.

A friend messaged me on WhatsApp or Messenger asking for money or a code. Is their account hacked?

It may be. WhatsApp says a suspicious message from a known contact could mean their account is compromised, and eSafety says that if a message from a friend seems out of character, you should ring or visit them to see if they really sent it before you consider replying.

Someone asked me to send them the six-digit code I just received. Is that a scam?

Don't share it. WhatsApp says someone trying to take over an account needs the SMS verification code sent to that phone number, and that you should not share your registration code with others, not even friends or family. It also notes an unrequested code can arrive when another user has mistakenly typed your number, so a code on its own isn't proof of an attack.

Is a message saying my Facebook or Instagram account will be disabled real?

Treat it as phishing until you have checked inside the app. Instagram says phishing messages may claim your account will be banned or deleted, and that it won't send you direct messages about your account in the Instagram app.

How do I spot a fake recruiter or job offer on LinkedIn?

LinkedIn says legitimate companies should not require transfers, checks, gift cards or the wiring of funds as a condition of the application process. Scamwatch adds that a job ad isn't real just because it appears on a trusted platform.

How do Facebook Marketplace scams work?

Meta says Marketplace scams can happen to both buyers and sellers. Its seller examples include screenshots of payments, claims of an accidental overpayment and requests for a refund without paying. For buyers, eSafety advises not sending deposits or paying in advance.

Scam message examples

Related scam types

Other scams hitting Australians right now — know the warning signs:

Sources

This guide is general information, not legal or financial advice — if you've lost money, contact your bank and the reporting channels above straight away.

Get the free weekly AU scam alert

One short email every Monday: the scams hitting Australians this week, and how to spot them.

Free. Weekly. Unsubscribe anytime. No spam, ever.