A text says your social media account is about to be disabled or locked, and to keep it you must reply with a verification code. In a notice dated August 10, 2026, the FBI warned that criminals send these texts and then ask the platform to reset your password, which makes the platform send a code to you. If you pass it on, they can change your password and get into your account.1
The FBI says these criminals target both adults and people under 18. Once inside an account, they look for private or explicit photos and videos, then post or sell them online, often with the person’s name, birthday, phone number or username.1 This page is about keeping them out, and what to do if it has already happened.
Your account has been reported and will be disabled within 24 hours. To keep your account active, reply with the verification code we just sent you.
How to tell
- It asks for a code you did not request. A code that arrives out of nowhere may mean someone is trying to reset your password. Do not share it with anyone, even someone who says they work for the platform.1
- It says your account will be locked. The text warns your account is being disabled unless you respond.1
- An email says there was a “new login.” Some fake emails copy the platform’s support team and include a link to “change your password.” Clicking it gives the criminals access.1
- The sender’s address is slightly off. The criminals use look-alike web and email addresses. On a computer, you can hover over a link to see where it really goes. On a phone, a fake email can look real at first glance.1
What to do
- Do not reply with the code, and do not tap any link in the text or email.1
- If you are worried about your account, go straight to the platform’s website or official app and check or change your password there.1
- Use a long, unique passphrase and PIN for each account. Do not build them from names or birthdays of you or your family.1
- Turn on multi-factor authentication, the extra sign-in step, for your accounts.1
- Do not keep sensitive photos or videos on social media or other sites on the internet.1
These steps are worth going over with teenagers too, since the FBI says young people are among those targeted.1
If you already shared a code or your content was taken
- Go directly to the platform’s website or official app and change your password and PIN.1
- If private images or videos were taken from your account without permission, report it to the FBI at ncii.ic3.gov. The form asks when the content was taken, whether you were under 18 in it, how it was obtained, where it was found, the usernames on your accounts, the sites where it was posted, and any harassment or threats since.1
- The FBI also points to the Federal Trade Commission’s Take It Down portal at takeitdown.ftc.gov.1
- If anyone’s life is in danger, call 911.1
Where to report it
- Stolen explicit content. ncii.ic3.gov.1
- Other scams and account break-ins. File a complaint with the FBI’s Internet Crime Complaint Center at www.ic3.gov, or contact your local FBI field office.1
- Danger to life. Call 911.1