Tech-savvy user has social media profile hacked, friends tricked into car sale listing

A red-faced millennial has shared how he and his family unwittingly became the face of a bold scam after hackers took over his social media accounts.

An Adelaide millennial has unwittingly been involved in a bold ruse to scam his friends out of money, after his social media accounts were hacked.

Johnny Smith*, aged in his mid 30s, was impersonated on his Facebook and Instagram accounts with hackers engaging with his friends.

The fake Facebook ad. Pictures supplied

They pretended to be him, and even tried to sell a car in the “awfully authentic” posts that highlight how vulnerable even tech-savvy social media users can be.

While none of it was true, the hackers shared a series of legitimate-looking images along with detailed information on the $6000 vehicle purportedly belonging to his dad.

“Due to my Dad’s move to a care facility, I’m selling his beloved 2012 Honda Accord,” it read.

“Accepting down payment to hold … your support and prayers are appreciated.”

Mr Smith said it was unsettling to realise the hacker had conversed with his friends, and implicated a family member in the “dodgy post”.

“The hacker … was pretty convincing to people who might know me casually; my dad is of an age where it is believable he could be going into a care facility,” he said.

“It is obviously unsettling for me but just as unsettling for my friends who thought they were having a conversation with me, some were really close to (sending money).

“Even though it is nothing I had done directly, I would have felt awful if any of my friends had been conned.”

The fake Facebook ad: Picture: supplied

The car, purportedly belonging to the man’s dad. Pictures supplied

Mr Smith, who says he is embarrassed to admit he didn’t have two-factor authentication but now does, immediately reported the illegitimate activity and the posts were removed.

He and his confused parents each received calls about the “for sale” car, with friends also concerned about his dad’s welfare.

Mr Smith said he regularly changes his email passcode and had done this on Monday but “made the mistake” of choosing one he’d previously used as well as disregarding an “unusual sign-in activity” email as spam.

“On Tuesday morning I couldn’t access my Facebook or Instagram and noticed two emails in my ‘deleted items’ from 2am, advising my passwords had been changed … if I had not reacted quickly enough, I still might have missed that window to say ‘that is not me,” he said.

“Unfortunately, it is a part of living in the modern world which is a sad thing to say … you just can’t be too careful.”

The ACCC through its ScamWatch site says Australians lost more money to social media scams last year than any other contact method.

“Scammers use fake or hijacked profiles on social media, messaging platforms and apps … over 6,000 people reported losing $58.3 million to social media scams in the first 10 months of 2024,” it reports.

SA Police say while social media hacks are common, police will only be notified when there “has been harm or financial loss to the victim.

*Not his real name.