Scams & Recovery

Spot Fakes, Block Attacks, Reclaim Accounts

Introduction

On social media, fake profiles, social engineering attacks, and account recovery are three interconnected aspects. Fake profiles are used for social engineering, and account recovery is your last line of defense. In this tutorial, you will learn:

• How to identify fake profiles
• Social engineering attacks and how to protect yourself
• Account recovery process for each platform
• How to keep your account safe during data breaches

Table of Contents

1. Fake Profiles
2. Social Engineering Attacks
3. Phishing Attacks
4. Account Recovery
5. Data Breaches & Response
6. Emergency Response Plan
7. Security Checklist

Fake Profiles

1.1 What are Fake Profiles?

Fake profiles are false identities created on social media, usually with malicious intentions.

Reasons for creating fake profiles:

• Phishing - Collecting personal information
• Impersonation - Committing fraud using someone else's name
• Catfishing - Deception in romantic/friendly relationships
• Scamming - Money or item fraud
• Spreading misinformation - Propagating fake news
• Social engineering - Information gathering

1.2 How to Identify a Fake Profile?

Visual Signs

Behavioral Signs

Content Based Signs

Technical Signs

1.3 Platform-Wise Fake Profile Detection

Facebook Fake Profile Detection

Profile → Click on Profile Photo → Options → Find Support or Report

Checklist:

• Right Click → Search Google for Image on the profile photo
• Scroll through the timeline (check for genuine activity)
• Check mutual friends count
• Check account creation date

Instagram Fake Profile Detection

Profile → Three dots → Report → Report Account

Checklist:

• Followers / Following ratio - High following, low followers = suspicious
• Check story highlights (genuine accounts usually have highlights)
• Comments on posts (generic or real?)
• Bio link suspicious? Then report

LinkedIn Fake Profile Detection

Profile → Three dots → Report / Block

Checklist:

• Profile completeness - Are education, experience, and skills filled in?
• Recommendations - Genuine or generic?
• Connections - Industry relevant connections?
• Activity - Posts, articles, engagement?

X (Twitter) Fake Profile Detection

Profile → Three dots → Report → They're being spammy or deceptive

Checklist:

• Tweet history - Consistent topics?
• Followers - Real followers or bots?
• Verification - Does it have a blue checkmark?
• Account age - Old or newly created?

1.4 How to Deal with Fake Profiles

Actions to take when you encounter a suspicious or fake profile.

Step-by-Step Action Plan:

Step 1: ⛔ Do NOT engage (don't reply, don't open links)
Step 2: 📸 Take a screenshot (for evidence)
Step 3: 🚫 Block the profile
Step 4: 🚨 Report to the platform
Step 5: 👥 Inform friends and followers
Step 6: 🔒 Check your privacy settings

Reporting Process

Social Engineering Attacks

2.1 What is Social Engineering?

Social Engineering is the art of psychological manipulation where an attacker tricks you into revealing your confidential information. This is not technical hacking — it is human hacking.

The Social Engineering Cycle:

1. Information Gathering → Attacker collects data about you
2. Relationship Building → Builds trust
3. Exploitation → Extracts information
4. Execution → Uses the collected data

2.2 Types of Social Engineering Attacks

1. Pretexting

What it is: The attacker creates a fabricated scenario (pretends) to obtain information.

Example:

Attacker: "I'm from your bank's fraud department. 
We detected suspicious activity on your account. 
Please share your OTP to verify."
Victim: [Shares OTP]
Result: Account compromised

How to protect yourself:

• Always call back on the official number
• Never share personal information over the phone
• Verify identity through official channels

2. Phishing

What it is: Fake emails or messages that look like legitimate organizations.

Types:

• Email Phishing - Fake emails
• Spear Phishing - Targeted phishing (specific person)
• Whaling - High-profile targets (CEOs, executives)
• Smishing - SMS (text) phishing
• Vishing - Voice (phone) phishing

Example (Spear Phishing):

Email From: "LinkedIn Security Team"
Subject: "Suspicious login attempt on your account"
Body: "Dear John, we detected a login from Russia. 
Click here to secure your account: [fake-link.com]"
→ Looks REAL but it's FAKE

How to protect yourself:

• Check the email address (official domain vs fake)
• Be careful with emails that create urgency
• Hover over links (see the true URL)
• Do not open attachments from unknown sources
• Always verify through the official website

3. Baiting

What it is: The attacker shows an attractive offer to trap you.

Examples:

• "Free Netflix Premium account"
• "Win iPhone 15 - Click here"
• "Free software download"
• "USB drive found in parking lot"

How to protect yourself:

• Do not trust free offers
• Too good to be true → Reject it
• Never connect unknown USBs
• Avoid pirated software

4. Quid Pro Quo

What it is: The attacker promises something in return for information.

Example:

"I'll help you fix your computer issue, 
just give me your login credentials."
"Free tech support, share your password once."

How to protect yourself:

• Always get tech support from official channels
• Never share your credentials
• Be careful of unsolicited help

5. Tailgating / Piggybacking

What it is: Physical security breach — the attacker enters a restricted area with an authorized person.

Social media equivalent:

• The attacker messages you from your friend's compromised account
• "Friend" says "check this link" and you trust it because it is your friend

6. Impersonation

What it is: The attacker uses the identity of a trusted person or institution.

Social Media Examples:

• CEO Fraud: Posing as CEO to ask employees for information
• Customer Support: Posing as platform support to ask for passwords
• Friend Emergency: Posing as a friend to ask for money
• Fake Authority: Threatening by pretending to be Police or Bank official

2.3 Social Engineering Red Flags

Immediate Red Flags:

2.4 Social Engineering Prevention Framework

S-T-O-P Framework:

S - Slow Down 🐢
    → Stop, don't make quick decisions
    → Control your emotional response

T - Think 🤔 
    → Analyze the situation
    → Is this genuine?
    → Check for red flags

O - Observe 👀
    → Verify the sender's identity
    → Check the language and tone
    → Check URLs and attachments

P - Proceed with Caution ⚠️
    → Verify through official channels
    → If not confirmed, ignore it
    → If suspicious, report it

Phishing Attacks

3.1 Phishing Email Recognition

10 Signs of a Phishing Email:

3.2 How to Check a Phishing Link

Method 1: Hover to Reveal

Link displays → www.facebook.com/login
Hover reveals → www.faceb00k.com/login
✅ Official = facebook.com
❌ Fake = faceb00k.com (00 = zero zero)

Method 2: Check SSL Certificate

✅ https://www.facebook.com (Lock icon, valid SSL)
❌ http://www.faceb00k.com (No SSL or invalid)

Method 3: Use URL Scanning Tools

• VirusTotal.com
• URLScan.io
• Google Safe Browsing

3.3 Tools to Protect Against Phishing

Browser extensions and tools that block phishing websites and links.

3.4 What to Do After a Phishing Attack?

Steps to take immediately after falling for a phishing attempt.

Immediate Steps:

1. Do NOT click any links or reply
2. Take screenshots (evidence)
3. Report to the platform
4. Report to CERT-In (cybercrime.gov.in)
5. Change affected passwords immediately
6. Enable 2FA if not already enabled
7. Monitor accounts for suspicious activity
8. Inform friends and family (if social media compromised)

Account Recovery

4.1 What is Account Recovery?

Account recovery is the process where you regain access to your account if it has been compromised, or if you have forgotten your password or PIN.

4.2 Important Steps Before Account Recovery

Preparations to make now for smoother account recovery later.

Before you need recovery, do this:

✅ Add recovery email (secondary email)
✅ Add phone number
✅ Set security questions
✅ Enable 2FA and save backup codes
✅ Save recovery codes (offline)
✅ Add trusted contacts (if available)

4.3 Platform-Wise Account Recovery

Facebook Account Recovery

Method 1: Email / Phone Recovery

Facebook Login Page → 
→ "Forgotten Password?"
→ Enter Email or Phone → Search
→ Send code to email/phone
→ Enter code → Reset password

Method 2: Trusted Contacts

Forgot Password → 
→ "Can't access these?"
→ "Recover with trusted contacts"
→ Contact 3-5 trusted friends
→ Each friend gives a recovery code
→ Enter codes → Reset password

Method 3: Identity Verification

Forgot Password →
→ "No access to email/phone?"
→ "Verify your identity"
→ Upload ID proof (Driving License, Passport)
→ Facebook team reviews
→ Recovery link sent to new email

Hacked Account Recovery:

Facebook.com/hacked → 
→ "My account is compromised"
→ Follow steps to secure account
→ Revert profile changes
→ Remove unknown logins
→ Change password

Instagram Account Recovery

Method 1: Email / Phone

Instagram Login → 
→ "Forgot password?"
→ Enter username/email/phone
→ Send login link to email
→ Click link → Reset password

Method 2: Login Help

Instagram Login →
→ "Forgot password?"
→ "Need more help?"
→ "I can't reset my password"
→ Enter email and full name
→ Instagram sends recovery steps

Method 3: Selfie Verification

If normal recovery doesn't work:
→ "Need more help?"
→ Upload a selfie holding paper with code
→ Instagram verifies identity
→ Recovery link sent

Hacked Account:

Settings → Security → Login Activity
→ Check for unknown access
→ Report hacked account: instagram.com/hacked
→ Follow guided recovery process

WhatsApp Account Recovery

Re-registration:

WhatsApp App →
→ Enter phone number (same number)
→ Verify via SMS or call
→ Enter OTP
→ Account restored (if backup exists)

Lost SIM Recovery:

Step 1: Get new SIM from operator (same number)
Step 2: Install WhatsApp
Step 3: Verify using SMS
Step 4: Enter Two-Step Verification PIN
→ If PIN forgotten: Wait 7 days to reset

Two-Step Verification Recovery:

If you forgot PIN + no recovery email:
→ Wait 7 days after app reinstall
→ WhatsApp sends password reset link
→ Can also contact WhatsApp support (limited)

Telegram Account Recovery

Standard Recovery:

Telegram App →
→ "Start Messaging"
→ Enter phone number
→ Enter OTP from SMS
→ Account restored

Two-Step Verification (Cloud Password):

Enter password (cloud password) →
→ If forgot: "Forgot password?"
→ Reset via recovery email
→ OR wait 7 days (if no email set)
→ Account auto-deletes if inactive

Account Self-Destruct Settings:

Settings → Privacy & Security → 
Delete my account if away for → 1/3/6/12 months
→ If you don't login for set period, account auto-deletes

LinkedIn Account Recovery

Method 1: Standard Recovery

LinkedIn Login →
→ "Forgot password?"
→ Enter email/phone
→ Send verification code
→ Enter code → Reset password

Method 2: No Access to Email / Phone

Forgot Password → 
→ "I don't have access to these"
→ Enter old email (for identification)
→ Follow LinkedIn's verification process
→ May need ID verification

Hacked Account:

linkedin.com/help → 
→ "Account compromised"
→ Report and follow recovery steps
→ LinkedIn support team assists

X (Twitter) Account Recovery

Method 1: Standard Recovery

X Login → 
→ "Forgot password?"
→ Enter email/phone/username
→ Send reset link to email
→ Click link → Reset password
→ OR send SMS code

Method 2: Locked Account Recovery

If account is locked for security:
→ Email receives unlock instructions
→ Verify email/phone
→ Reset password
→ Review recent activity

Method 3: No Access to Email / Phone

"Forgot password?" →
→ "Use alternative method"
→ Answer security questions (if set up earlier)
→ OR provide account details for verification
→ X support reviews

4.4 Account Recovery Tips & Tricks

Recovery Information Management

Common Recovery Problems

Problem: "Recovery email is also compromised"

Solution: Use secondary recovery method
→ Phone number verification
→ Security questions
→ Identity verification (ID upload)
→ Contact platform support

Problem: "Phone number has changed"

Solution: 
→ Use recovery email (if set)
→ Use trusted contacts
→ Contact support with ID proof
→ Update number immediately after recovery

Problem: "2FA device is lost"

Solution:
→ Use backup codes (saved during 2FA setup)
→ Use recovery email
→ Contact platform support
→ Identity verification

Data Breaches & Response

5.1 What is a Data Breach?

A data breach occurs when an unauthorized person accesses user data from a company's database.

Famous Social Media Breaches:

5.2 Check if Your Data is Breached

Online services that tell you if your data was exposed in a breach.

Tools to Check:

1. Have I Been Pwned: haveibeenpwned.com
   → Enter email → Check if compromised

2. Firefox Monitor: monitor.firefox.com
   → Email scan for breaches

3. Google Dark Report: one.google.com
   → Check dark web for your info

4. DeHashed: dehashed.com
   → Search for email/username

5.3 Steps After a Data Breach

What to do right after learning your data was compromised.

Immediate Actions (24 hours):

🔴 Step 1: Change password of affected platform
🔴 Step 2: If password reused → Change ALL accounts
🔴 Step 3: Enable 2FA (if not enabled)
🔴 Step 4: Check account for suspicious activity
🔴 Step 5: Check connected apps/services

Short-term Actions (1 week):

🟡 Step 6: Monitor financial accounts
🟡 Step 7: Check credit report
🟡 Step 8: Update security questions
🟡 Step 9: Remove unused third-party apps
🟡 Step 10: Inform close contacts

Long-term Actions (1 month):

🟢 Step 11: Use password manager
🟢 Step 12: Enable breach notifications
🟢 Step 13: Regular account audits
🟢 Step 14: Credit freeze (if financial data leaked)
🟢 Step 15: Monitor identity theft signs

Emergency Response Plan

6.1 Account Compromised - Emergency Plan

A timed response plan for when your account gets hacked.

Within 5 Minutes:

1. Attempt to login with current password
2. If password changed → Use "Forgot Password"
3. If email/phone changed → Use recovery options
4. Check recovery email for password reset emails

Within 15 Minutes:

5. If can't recover → Report to platform
6. Inform close friends/family
7. Check connected accounts
8. Change passwords of linked accounts

Within 1 Hour:

9. Run antivirus scan on all devices
10. Check if any posts/messages were sent
11. Remove unknown devices from account
12. Document everything (screenshots)

6.2 Social Media Crisis Kit

Pre-prepared information to have handy during a security incident.

Keep this information ready (offline):

📋 Account Information:
- Username/Email for each platform
- Account recovery email (separate)
- Backup codes (printed)
- Security questions & answers

📋 Platform Support Links:
- Facebook: facebook.com/hacked
- Instagram: instagram.com/hacked
- WhatsApp: support.whatsapp.com
- Telegram: twitter.com/telegram
- LinkedIn: linkedin.com/help
- X (Twitter): help.twitter.com

📋 Emergency Contacts:
- Local cyber crime: 1930
- Cyber crime portal: cybercrime.gov.in
- Identity theft report

6.3 How to Protect Family & Friends

If your account is compromised:

1. Post on social media (account is compromised)
2. Personally inform friends and family
3. Tell them to ignore suspicious messages
4. Tell them not to open links coming from your account

If your contact's account is compromised:

1. Call them (don't message)
2. Inform them about it
3. Avoid suspicious messages
4. Report to the platform

Security Checklist

Fake Profile Detection Checklist

• Did you run a reverse image search on the profile photo?
• Did you check the account age?
• Did you check mutual friends/counts?
• Did you check profile completeness?
• Did you check activity timeline?
• Suspicious links in bio?
• Received generic messages?
• Verified common connections?
• Reported if found fake?
• Blocked the fake profile?

Social Engineering Prevention Checklist

• Do you remember the STOP framework?
• Did you avoid immediate action on urgent messages?
• Did you avoid clicking links from unknown senders?
• Did you avoid sharing OTPs/codes?
• Did you call back to verify (for financial requests)?
• Did you check for phishing email signs?
• Is your device antivirus updated?
• Are browser security extensions installed?
• Are your social media privacy settings strong?
• Have you educated family members?

Account Recovery Checklist

• Is recovery email added?
• Is phone number verified?
• Are backup codes saved? (offline)
• Are trusted contacts set? (Facebook)
• Are security questions configured?
• Is 2FA enabled?
• Is recovery information updated?
• Do you use a password manager?
• Are old accounts deleted/unused?
• Do you check Have I Been Pwned regularly?

Data Breach Response Checklist

• Password changed immediately?
• All affected accounts password changed?
• 2FA enabled (if not already)?
• Account activity checked?
• Connected apps reviewed?
• Financial accounts monitored?
• Credit report checked?
• Friends/family informed?
• Password manager updated?
• Breach reported (if applicable)?

Fake Profile vs Genuine Profile Comparison

Useful Links

• Report Hacked Accounts:

  • Facebook.com/hacked
  • Instagram.com/hacked
  • LinkedIn Help Center
  • Twitter Support

• Security Tools:

  • Have I Been Pwned
  • Google Safety Check
  • VirusTotal URL Checker
  • Phishing Website Checker

• Indian Cyber Crime Resources:

  • National Cyber Crime Reporting Portal
  • Cyber Crime Helpline: 1930
  • CERT-In

"The best defense against social engineering is not technology, it's awareness."