Social media impersonation: recovering the money

What changes once money has already been sent

The situation shifts from prevention to recovery the moment a payment has gone out to a hacked or cloned account. What matters now is how quickly you act and how much can be traced.

Confirm with the real person through a separate channel first, since the account may still be compromised and actively used against others. A phone call or a message through another platform works better than replying in the same chat.

Everything from this point depends on the receiving account: whether it belongs to a real person, a reused mule account, or someone abroad using a local bank.

Reporting to the platform and the police

Report the account or profile to the platform it is on, describing exactly what happened and attaching screenshots of the conversation. Platforms can suspend accounts faster when the report includes clear evidence rather than a general description.

File a police report, including with the Commercial Crime Investigation Department (CCID), covering the messages, the payment details, and the account number you sent money to. Call the National Scam Response Centre on 997 if the transfer was recent.

Warn any mutual friends who may also be contacted from the same compromised account, since scammers commonly reuse a working approach.

Checking whether the account can be traced

Whether the money can be traced depends on where it landed: a bank account, an e-wallet, or a payment platform, and whether it has moved on already. Semak Mule, the police database for checking reported accounts, can show whether the receiving account has been flagged before.

The faster the report is made, the more likely the receiving account still holds something, or can at least be identified clearly for later steps. Time matters more here than in almost any other part of the process.

Once the account holder is identified

If the platform, the bank, or the police confirm who controls the account, a civil claim against the account holder becomes a realistic option to weigh. This applies most clearly when the amount lost is significant.

Whether legal action is worth it depends on the sum involved, the evidence you kept, and what the account holder actually has to recover from. Reading about how this type of impersonation usually unfolds can also help you understand the pattern behind what happened.

What to do next

Gather everything in one place: the messages, the payment record, the account number, and the platform report reference. This is what a bank, the police, or a lawyer will ask for first.

Report through both channels, the platform and the police, since each can act on different parts of the problem. Consider a short conversation about your options once you know more, and see the recovery routes available to scam victims for a broader view of what else might apply.