Deepak Gupta

Relationship and trust · Also called hi mum scam, hacked WhatsApp account scam, friend in need scam, new number scam

Hijacked-account friend in need

A friend-in-need scam is a message from a friend or relative's real account that has been taken over, or from a new number claiming to be them, asking for urgent money or a verification code. Because it comes from someone you trust, it feels safe, but the scammer is behind it.

How it works

The scammer takes over a messaging or social media account, often by tricking the owner into sharing a verification code, then turns on two-step verification to lock them out.
Alternatively, the scammer texts from a new number saying they are a relative who has lost or broken their phone.
Messages go to the account's contacts or group chats with an urgent request for money, often for a bill or emergency.
Some messages ask the recipient to forward a code sent to their phone, which lets the scammer take over their account too.

Red flags

A friend or relative messages that they have a new number or cannot talk on the phone.
They need money urgently, often to pay a bill, and ask you to send it to an account in someone else's name.
They ask you to forward a verification code that was just sent to your phone.
The writing style, spelling, or nicknames do not sound like them.

If you are targeted

Stop contact and do not send money or share any code until you have spoken to the person.
Call the friend or relative on the number you already have to check, and warn them their account may be compromised.
If you shared a code, secure your own account now and turn on two-step verification.
Report it. Our Report a scam page lists where to report in your country, such as ic3.gov and ReportFraud.ftc.gov in the US.
If you lost money, contact your bank immediately, and ignore anyone who later offers recovery of it for a fee.

Where to report, by country

Prevention

For individuals

Turn on two-step verification with a PIN on your messaging apps, email, and social media accounts.
Never share a verification code or scan a QR code someone sends you, even if the request comes from a friend.
Always call a friend or relative to confirm any unusual request for money before paying.

For organisations

Messaging platforms can warn users when their account is registered on a new device and prompt contacts when an account shows signs of takeover.
Banks can show confirmation of payee warnings when the account name does not match the person the customer thinks they are paying.

By the numbers

Figures are for the reporting category this scam falls under, not this scam alone.

Imposter scam losses reported to the FTC in 2025 (more than this amount)

$3.5B

US, 2025, FTC

Real cases

No documented case in the atlas yet. New cases are added as they are sourced.

Delivered through: SMS phishing (smishing)

How official datasets classify it

FTC: Family & Friend Imposters

Questions

How do scammers take over WhatsApp and other messaging accounts?: Usually by tricking the owner into sharing a verification code or scanning a QR code. They then turn on two-step verification themselves to lock the owner out.
My friend asked me for money on WhatsApp. Is it a scam?: It might be. Call your friend on the number you already have before sending anything, since the message could be from a hijacked account or a new number pretending to be them.