Learn how to spot account recovery scams, recognize fake account recovery emails or text messages, and get clear next steps if a social media or online account in your family may be targeted.
Share what you’re seeing—like phishing messages about account recovery, suspicious recovery links, or unusual login alerts—and get guidance tailored to your family’s situation.
An account recovery scam happens when a scammer pretends to help restore access to an account or claims there is a problem that must be fixed right away. These scams often appear as fake account recovery emails, text messages, or direct messages that push someone to click a link, share a code, or enter login details. Parents may see this with email, gaming, banking, or social media account recovery scam attempts aimed at teens and adults alike.
Scammers often say an account will be locked, deleted, or permanently lost unless action is taken immediately. Pressure and urgency are common warning signs.
A real company should not ask your child or you to send one-time login codes, passwords, or backup codes through email, text, or direct message.
Phishing messages about account recovery may use lookalike websites, misspelled domains, or shortened links that hide where they really lead.
If you get an account recovery scam text message or email, do not use the link. Open the service yourself and check account alerts there.
Use unique passwords, a password manager, and two-factor authentication. This lowers the chance that a scammer can take over an account.
Explain that scammers may pretend to be support staff, friends, or platform security teams. Encourage them to ask an adult before clicking or replying.
Change the password from the official site, sign out of other sessions, and update recovery email and phone details if possible.
Look for changes to profile details, linked apps, saved cards, or messages sent from the account. A compromised account can affect more than one service.
Report suspicious messages to the platform involved, mark phishing emails as spam, and document what happened so you can take follow-up steps if needed.
Fake account recovery emails often create urgency, use suspicious sender addresses, include links to lookalike websites, or ask for passwords and verification codes. Instead of clicking, go directly to the official website or app.
A social media account recovery scam may arrive as a direct message, email, or text claiming your account was reported, locked, or needs verification. It may ask you to click a link, confirm your password, or share a login code.
Start by changing the password on the official platform, enabling two-factor authentication, reviewing recent account activity, and checking whether recovery details were changed. Then report the message and talk through how the scam worked so it is easier to spot next time.
Yes. Scammers often use text messages because they feel immediate and personal. These messages may claim there was a login problem or security issue and push you to tap a link quickly.
You can report it to the platform or company being impersonated, your email provider or mobile carrier, and relevant consumer protection or cybercrime reporting channels. Saving screenshots and message details can help.
Answer a few questions to receive a focused assessment and personalized guidance on warning signs, immediate next steps, and how to help protect your child’s accounts going forward.
Answer a Few QuestionsExplore more assessments in this topic group.
See related assessments across this category.
Find more parenting assessments by category and topic.
Scams And Phishing
Scams And Phishing
Scams And Phishing
Scams And Phishing