The text comes from a friend you have known for years. Same name. Same photo. They need a wire sent today, and they cannot talk right now. Maybe their account was hacked. Maybe the person typing is not your friend at all. Either way, the money is the target.
Why a request from a friend can look genuine
Scammers like to pose as someone you already trust. That can be a family member, or a friend of a friend. The request usually involves a wire that has to go out right away or within a very short window, according to a message from the director at HelpWithMyBank.gov (source).
Account takeover makes this easier. The FBI's Internet Crime Complaint Center describes it as criminals gaining unauthorized access to someone's online bank, payroll, health savings or social media account to steal money or information (IC3). Methods include phishing emails, fake websites, social engineering, data breaches, malware and weak passwords with no multi-factor authentication.
So the message may carry the real name and the real photo. That is the whole trick. The CFPB lists wire or money transfer fraud and account takeover-related identity theft among its fraud topics, which tells you how common the pairing is (CFPB).
Red flags to check before you act
Most of these scams lean on speed. Speed leaves no time to think. That is the point.
- A request to wire money immediately or within a very short time window.
- A person who says they are a friend or relative and reaches you by urgent text or call.
- Pressure to move money fast. FINRA warns about this in the context of brokerage accounts, and the logic travels well (FINRA).
- Any request for a one-time passcode or login details, even from a familiar name.
That last one deserves a second look. In some takeovers, a criminal posing as a bank employee or tech support asks the victim for a one-time passcode, then uses it to get into the account (IC3). If a friend's hacked account asks you for a code, you may be the next victim, not just the messenger.
How to verify the request through a separate channel
The core idea is simple. Stop. Confirm through a path the sender did not hand you. Do not reply to the message. Do not call a number inside it.
Call your friend on a number you already have saved. Or find them in person. If they do not pick up, try another relative or someone close to them. The sources I reviewed do not lay out a formal step-by-step verification method, so check with your bank or the relevant agency before leaning on any single procedure.
Family emergency scams show why this matters. A fraudster poses as a relative, or as an attorney for one, and says there was an arrest or a medical emergency. Then comes the ask for an immediate wire for bail or care (HelpWithMyBank.gov). A real emergency can survive a few minutes of checking. You can contact other family members, or the facility or agency named in the message.
The FTC has more on how imposters work, including how scammers use friend requests and messages to build trust (FTC on friend requests, FTC on imposter scams).
Why wire transfers are hard to reverse
Consumers lose millions of dollars each year to fraudsters who use wire transfers. In most cases, once a wire is complete, the money cannot be retrieved (HelpWithMyBank.gov). That is why the check has to happen first. After is usually too late.
The sources here do not say how to recover wired funds. They also do not say what a bank must do after a fraudulent wire, or which transfers carry consumer protections. Ask your bank directly, and look at the CFPB's current guidance.
If your friend's account was hacked, and what to report
Start with the money. If you sent funds or shared a passcode, contact your bank right away and say exactly what happened. The CFPB says to take action no matter how much is lost (CFPB).
Then look at reporting. The FTC has a Wire Transfer Scams page, and IC3 has an Account Takeover page. Neither excerpt I reviewed explains how the reporting tools work, so visit them for current steps.
There is a gap on the friend's side too. The sources do not cover how to secure a hacked account or warn their contacts. The account provider is the place to ask. In the meantime, you can tell your friend by phone that something is wrong.
One last reminder. The American Bankers Association has a consumer campaign on what banks never ask customers to do, a useful baseline that real institutions do not demand passcodes or rushed transfers (ABA). This article is educational only and is not personal financial or legal advice.
Please seek a professional. This article is general information, not financial, tax or insurance advice. Please seek a licensed financial, tax or insurance professional about your own situation.
