Facebook account cloning scam tricks victims by using friends as proof of legitimacy

Account cloning remains one of the oldest scams on social media, but cybercriminals are finding new ways to exploit victims by combining trust hijacking with emotional manipulation.

The emerging tactic was recently discussed by veteran broadcaster Ka Gerry Baja during the Dos Por Dos program on DZRH, where he highlighted a new variation of the long-running account cloning scheme.

Traditionally, scammers create fake social media accounts that closely resemble those of legitimate users. They copy profile photos, names, and publicly available information before contacting the victim’s friends and relatives to solicit money.

However, cybercriminals are now adding another layer to the deception by involving mutual friends in group chats. The scammer asks these friends to vouch for the cloned account and may even urge them to send money first to demonstrate their trust in the person being impersonated. This tactic is designed to exploit existing relationships and convince the intended victim that the request is genuine.

In a post shared by Ka Gerry on Facebook, the scammer cloned the Facebook account of Mavel and initiated a conversation involving another friend identified as She.

The scammer claimed that she supposedly owed money to the real Marvel and requested that She vouch for the real Mavel because she will send money to her. To strengthen the deception, the scammer created a group chat on Facebook Messenger with the fake Mavel account. The scammer then repeatedly referenced the relationship between the parties and attempted to name of Mavel in the conversation as evidence that the request was legitimate.

The scammer went a step further by suggesting that She send money to demonstrate that she trusted Mavel. The tactic appeared designed to pressure the intended victim into believing the request was genuine.

Scam Watch Pilipinas describe this technique as “trust hijacking,” where criminals leverage existing social relationships to lower a target’s defenses.

Unlike traditional phishing attacks that rely on malicious links or fake websites, trust hijacking exploits personal relationships and social proof. Once a victim believes that a friend, relative, or trusted contact is the one in the group chat, they are more likely to comply.

The scheme also employs emotional manipulation. By creating a narrative involving debt, financial obligations, friendship, or an urgent need for money, scammers attempt to bypass skepticism and trigger an emotional response.

When the intended victim in the conversation delayed sending money and questioned the request, the scammer eventually abandoned the impersonation and responded with insults, exposing the fraudulent nature of the account.

Scam Watch Pilipinas warned the public that the presence of mutual friends in an online conversation such as group chats should never be treated as proof of legitimacy.

“Cybercriminals understand that people trust relationships more than technology. They are now exploiting that trust in increasingly sophisticated ways. A friend appearing in the same chat does not mean the request is genuine,” Jocel de Guzman, co-founder of Scam Watch Pilipinas said.

The group advises the public to verify any request involving money through a voice call, video call, or another communication channel that is known to belong to the real person. It also recommend reporting cloned accounts immediately and enabling two-factor authentication on social media platforms.

As scammers continue to evolve their techniques, experts at Scam Watch Pilipinas say the best defense remains verification.

Trust can be manipulated. Verification cannot.