05/19/2020
Those of us on Facebook have likely gotten a “friend request” from a person who we are already friends with or have seen a friend post: “don’t accept a friend request from me, I have been hacked.”
Setting up fake accounts to look like real accounts is called spoofing. Those behind the spoofing duplicate an account by using information that is available to the public including names, profile and cover photos, and friend lists.
Until recently, I have considered spoofing to be a mere annoyance. However, last fall we had someone into our office who was financially exploited by Facebook spoofing. The spoofer posed as a long lost friend from another state and used information he gathered to play on the sympathies of our client, alleging he suffered from a chronic illness. Our client then sent substantial sums of money to the spoofer.
Today I had a spoofer, posing as a friend, leave a comment on my profile picture telling me to add them to their new account. These scams will always evolve, so it is very important that you are vigilant.
What can you do to stop spoofing:
1. Update your Facebook privacy settings so that your friends list is only visible to you.
2. Check people out before you add them on Facebook. If they are already your friend, the new request is likely from a spoofer.
3. Report spoofers to the “Facebook Police” so that the profiles can be deleted before anyone is financially exploited.
4. Do not add spoofers as friends, this will open up your private information to them.
5. Review your login history, if it includes unknown locations or devices, you may have been hacked and you should change your password.
6. Do not send anyone money over social media.
How can you spot a spoofer:
1. They have very few Facebook friends.
2. They have very few posts.
3. They message you in a way that is not typical for your real friend.
Facebook spoofing is just one of many means people use to financially exploit others. If you receive a suspicious communication, we would be happy to review it for you and advise you if it is legitimate. We typically review these sort of communications at no cost.