Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →A familiar name in Messenger does not prove a message is genuine: a compromised account can send unexpected links or fake pleas for help or money. Don’t click, pay, or share a login code until you verify the request through another trusted channel. If your own account shows signs of unauthorized access, use the platform’s official recovery process, then secure it and alert your contacts.
How to spot a suspicious Messenger message
The Federal Trade Commission (FTC) warns that hacked social media accounts may send random links or fake requests for help or money. Be cautious when a friend’s message is unexpected, urgent, or unlike their usual communication. An unusual message is a reason to check, not proof that the account has been hacked.
As an Amazon Associate I earn from qualifying purchases.
- An unexpected link, especially one urging you to sign in or act quickly.
- A sudden request for money, financial details, or a favor that feels out of character.
- A plea for help that you cannot confirm directly with the person.
Verify unusual requests using a separate channel you already trust, such as calling the person at a known number. Don’t rely on contact details or sign-in links included in the suspicious message. To check your own account, open the service’s official app or type its known official address yourself.
Signs your own account may be compromised
These warning signs warrant prompt action, but no single one proves a takeover:
#1 Best Overall
- You can no longer log in, or your password, username, email address, or phone number has changed without your knowledge.
- You receive an alert about a login or account change you do not recognize.
- Friends say they received messages from you that you did not send.
- You find unfamiliar posts, messages, contacts, or other activity.
Check alerts and account activity through the service’s official app or website rather than following a link in an unexpected notification.
What to do if you suspect a Messenger account was taken over
- Don’t interact with suspicious links. Don’t use a link or contact information in the message to sign in. Go directly to the official app or site and follow its account-recovery instructions.
- Use Facebook’s recovery route if it applies. Meta’s Facebook recovery guidance directs users to facebook.com/hacked from a device they have used to log in to Facebook before. Follow the current instructions there.
- Secure the account once you regain access. Change the password to a strong, unique one; sign out of other sessions or devices; turn on two-factor authentication (2FA) if available; and confirm the recovery email address and phone number belong to you.
- Look for activity you did not authorize. Review messages, posts, contacts, and account activity. Check the email account connected to the service, including its sent and deleted mail and forwarding rules, for signs of access you did not make.
- Check your device for suspicious software. The FTC recommends making sure computer security software is up to date and running a scan during account recovery. A scan can help check for suspicious software; it does not recover a social media account.
- Warn your contacts. Tell friends and family not to click unexpected links or respond to money requests from the account until you confirm it is secure.
- Report or block the message if appropriate. Facebook’s messaging help guidance says you can block messages from a sender or report a message that seems like spam or makes you uncomfortable. Use the platform’s current controls; a report does not guarantee removal.
Account recovery depends on the platform’s official process. A security scan or paid support subscription should not be treated as a substitute for that process.
Protect the email account connected to Messenger
Your email account can be central to resetting passwords and receiving security alerts. In its August 2023 guidance, the FTC says, “Your email account is an important part of protecting your personal information online,” and advises using a strong password and turning on two-factor authentication. The FTC’s October 2024 alert recommends a password of 12 to 15 characters or a passphrase. Use a password you do not reuse on other accounts, and enable 2FA on email as well as on social accounts when available.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
When to take additional identity-theft steps
If you believe personal information was stolen, the FTC directs people to IdentityTheft.gov to report identity theft and get a personalized recovery plan.
Quick Recap
Prevent a repeat takeover
- Keep passwords unique and hard to guess, especially for your email and social accounts.
- Use 2FA where the service offers it, and keep recovery details current.
- Review login alerts and account activity, and act on changes you did not make.
- If you consider a physical security key, first verify that your service and device support it and understand the account’s setup and recovery requirements. Meta lists security keys among Facebook login-security features, but compatibility and recovery options depend on the service and device.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
