A friend of mine is asking for a code or money.

The message came from a friend's profile, in the same conversation as the previous one. It still does not give any certainty who is writing now. After taking over the account, the cheater can use the photo, contact history and familiar style of the conversation.

The easiest way to check an unusual request is a short phone call to a previously known number. Do not use the new number given in the same suspicious message.

“Leverage for a moment, I'll pay you back”

Request for a quick transfer or payment code often has a reason to end the discussion: unloaded phone, urgent purchase, sudden breakdown. Stop payment until confirmed by another channel.

An example of a conversation: someone writes “I can’t talk now, just send the code”. It is precisely the lack of independent confirmation that is the reason to wait. You don’t have to prove that it is cheating to refuse immediate payment.

If the transaction requires approval in the banking application, read its description: amount and type of operation. Do not automatically approve because the caller says that “it’s just verification”.

“My code has come to you”

The code sent to your number may be about logging in, retrieving an account or linking a new device. The transfer allows someone to complete the operation started with your data.

Read the text or notification. Do not transmit the code just because the sender claims to have given the wrong number. Doubts explain by official service assistance, not by the form sent in the chat.

Similarly, treat the request to scan QR. The code can be used to approve a session on someone else's computer. Check the message in the application before confirmation.

“Vote for me” or “is it you in the movie?”

The link can lead to a copy of the login screen. If the page requests a re-password, interrupt and open the platform independently. Do not treat your friend's logo or photo as confirmation.

A password manager that does not offer a normal entry gives you an additional reason to check the address. Manually pasting a password can bypass this useful hint.

If the data or money has already been transferred

When paying, contact your bank immediately by a known number or application. When submitting login data, secure the correct account: change your password, finish foreign sessions and check the recovery methods.

Phishing response plan Orders steps depending on whether the link has been opened, the data has been given, the payment has been made or the program has been launched. It does not require the account to be entered.

Keep the conversation and information about the transaction. Report the acquired profile in the platform and warn your friend via another channel. Do not publish full numbers, codes or other private data in the warning.

When your account is taken over, please inform contacts about the specific risks: “I did not send a request for money; do not make this payment.” This message is more useful than the general “watch out for hackers”.