The short answer
If a friend recommends a crypto investment on social media, be skeptical. Scammers often hack accounts or create near-identical profiles to target followers. Never trust a link sent via private message, even from a friend. Contact the person through a separate, known, and reliable channel, such as a direct phone call, to verify they actually sent the message and that their account has not been compromised.
Seeing a crypto investment recommendation from a friend or family member online can be persuasive. However, in the age of sophisticated online fraud, digital accounts can be hijacked or impersonated to trick unsuspecting users into fraudulent schemes.
This article explores how to verify such recommendations and what steps to take if you suspect a friend's account is compromised. Maintaining skepticism for unsolicited investment advice is the best defense against social media-based scams.
01Recognizing Hacked or Impersonated Accounts
Impersonation and hacking are common tactics. A scammer may take over a friend’s account to message their entire list, or they may clone a profile, using the same name and photo to solicit trust from friends and family.
Be wary of messages that deviate from the person's usual communication style. Does the tone seem unusually formal, overly enthusiastic about a financial product, or urgent? If a friend suddenly reaches out to discuss a 'unique' crypto opportunity, it is highly likely to be a scam, even if it comes from an account you recognize.
Sources for this section[1] FMA: report a scam[2] New Zealand Police: cryptocurrency investment warnings
02Verifying the Recommendation
Never interact with links sent in direct messages, especially those related to investments. If you receive such a message, step back. Contact the person via a different method you know is legitimate—such as a personal mobile number or a face-to-face meeting.
Ask them to discuss the investment offline. A legitimate contact will understand your caution. If they cannot or will not talk to you through a reliable, alternate channel, it is likely that the account is compromised.
Source for this section[1] FMA: report a scam
03The Danger of 'Wallet Upgrades'
A frequent follow-up in these scams is a request to 'upgrade' your wallet, 'sync' your account, or provide a recovery phrase to solve a technical issue. No legitimate investment platform or support service will ask you to share your recovery phrase or private keys.
These requests are specifically designed to give attackers full control over your digital assets. If a friend's account is asking you to perform these steps, stop all communication with that account immediately.
Source for this section[3] Ethereum: wallet custody and recovery
04Reporting Compromised Accounts
If you determine that a friend's account is hacked, inform them through another channel immediately so they can recover control of their profile. You should also report the fake or compromised account to the social media platform itself.
Additionally, if the scam involves an investment platform targeting New Zealanders, report the entity to the FMA. This helps the regulator keep their warnings and alerts list up to date and protects other users.
Source for this section[1] FMA: report a scam
05Hypothetical Verification Strategy
Apply a verification protocol to every unexpected financial solicitation:
1. Do not reply to the social media message. 2. Identify an alternate, known contact channel for the person. 3. Ask a security question only your friend would know. 4. If they become aggressive or refuse to communicate off-platform, block the account. 5. If money was sent, follow the Reporting article procedures immediately.
Sources for this section[1] FMA: report a scam[2] New Zealand Police: cryptocurrency investment warnings
Checklist
- Be skeptical of sudden investment advice via social media.
- Do not click links provided in messages from acquaintances.
- Verify the person's identity via a separate, trusted communication method.
- Never share your recovery phrase or keys with any account.
- Inform your friend through a different channel that their account may be hacked.
- Report the suspicious account to the platform provider.
- Document all suspicious messages for your records.
Questions people ask
What should I do if a friend asks me to invest in crypto?
Ask for details outside of the social media platform. If they refuse or persist with urgent, technical instructions (like asking for a wallet password), do not engage. It is safer to assume the account is compromised.
Is it possible to recover money if I followed a friend's scam link?
If you provided keys or transferred funds, contact your bank and report the fraud to the FMA. Recovery is difficult, but acting quickly gives you the best chance of minimizing damage.
Why do scammers target friends through social media?
They rely on the natural trust existing between family and friends. When a victim sees a familiar name, they are less likely to question the legitimacy of an investment offer, making the scam highly effective.
Safety boundaries
- No legitimate helper needs your seed phrase, private key, password, one-time code, remote access to your device or a wallet connection.
- Nobody can promise that funds will be recovered. Treat any guarantee, or any fee demanded to release funds, with suspicion.
- Find official contact details yourself, through the regulator, bank or platform website, not through a message or advert you received.
- This guide is general education. It is not legal, financial or tax advice and does not assess your situation.
If you want to organise your facts, the initial claim outline on our homepage collects only a short summary and contact details. It creates no client relationship and promises no outcome. Do not send documents or credentials.
Official sources
- [1]FMA: report a scam
Checked 4 October 2026 - [2]New Zealand Police: cryptocurrency investment warnings
Checked 4 October 2026 - [3]Ethereum: wallet custody and recovery
Checked 4 October 2026
AI-assisted educational content published by Central Crypto Claim using the official sources listed below. No independent expert review is claimed. This is not legal, financial or tax advice.