If you have just received a message on Facebook, Instagram, or WhatsApp from a friend or family member desperately asking you to transfer money for a medical emergency or an unpaid bill, do not send the money.
Pick up your phone and call them via a standard voice network. It is highly likely you are talking to a cybercriminal who has either cloned your friend’s profile or hacked into their account.
The "friend in need" impersonation scam is one of the most successful social engineering attacks in India. Here is exactly how criminals weaponize your relationships, and how you can protect yourself from digital impersonation.
How the Impersonation Scam Works
Scammers exploit your willingness to help the people you care about. They know that if a stranger asks for Rs. 10,000, you will ignore it. But if your cousin asks, you might transfer it immediately. They execute this through three main tactics:
Tactic 1: The Cloned Profile (Facebook & Instagram)
A scammer finds your friend's public profile. They download your friend’s profile picture and create a brand new account with the exact same name. They then send friend requests to everyone on your friend's contact list.
Once you accept the request (assuming your friend just made a new account), the scammer sends a direct message: "Hey, I'm stuck at the hospital and my UPI isn't working. Can you urgently transfer Rs. 5,000? I'll pay you back tonight."
Tactic 2: The "New Number" WhatsApp Message
You receive a WhatsApp message from an unknown number featuring your friend’s face as the profile picture. The message reads: "Hey, I lost my phone and got this new number. Please save it. Also, I'm in a huge emergency..."
Because you recognize the face in the DP (Display Picture), you assume it's true and comply with the request for funds.
Tactic 3: The Hacked Account
This is the most dangerous variant. A scammer tricks your friend into sharing a WhatsApp or Instagram verification code (often disguised as a "vote for me" contest link). The scammer takes full control of your friend's actual account and messages all their contacts. Because the message is coming from the legitimate account history, the success rate for the scammer is terrifyingly high.
The Flaw in Social Media: Zero Identity Verification
Why is it so easy to clone a profile? Because traditional social media platforms and messaging apps operate on an unverified honor system.
When you sign up for Facebook, Instagram, or WhatsApp, the platform asks for your name, but it takes absolutely no steps to verify if that is actually your legal name. Anyone in the world can download your photo, type in your name, and become "you" on these networks.
This lack of identity verification makes these platforms an absolute playground for fraudsters.
The AirlockChat Guarantee: Zero Impersonation
We shouldn't have to second-guess whether the person messaging us is actually our friend or a scammer operating out of a boiler room. This is the exact problem AirlockChat solves.
AirlockChat is built on a foundation of cryptographically verified identity.
- Impossible to Clone: On AirlockChat, every user must complete a mandatory government ID verification (like DigiLocker) before creating an account. You cannot create a fake profile because the name on your government ID is locked as your permanent display name.
- Absolute Certainty: If your friend "Vikram" messages you on AirlockChat, you have 100% certainty that the person holding the phone is the real Vikram. The system does not allow impersonation.
- Safe Family Networks: By moving your family and close friends to an ID-verified platform, you completely eliminate the risk of the "friend in need" scam.
Key Takeaways
Cybercriminals are exploiting the lack of identity verification on traditional social media to steal from your network.
If anyone—even your closest friend or family member—messages you online asking for money:
- Do not send funds immediately.
- Call them on a standard phone line to verify the request.
- Ask a security question only they would know the answer to.
For communication where you never have to guess who is on the other end, switch to AirlockChat. Available for free on iOS and Android.