A message arrives that seems to come from the social platform itself: your account is eligible for a verification badge, or your existing badge will be removed unless you confirm your details now. For anyone who values their presence online, it is tempting to click. It is also a scam built to steal your account. Our GetMyPassword team explains how to recognize a fake verification badge scam.
How the scam works
You receive a DM, email or comment claiming to be from the platform’s “verification team.” It either offers a coveted blue check or warns that your account will lose its badge or be suspended unless you act. A link leads to a convincing but fake login page, where entering your password hands it straight to the scammer. Some versions ask you to “confirm” by sharing a verification code sent to your phone. Either way, the prize or threat is bait, and your account is what they take.
Red flags to watch for
- An unsolicited “verification” offer or warning by DM, comment or email.
- A link to log in to claim or keep a badge, rather than an in-app process.
- A look-alike sender — a slightly off handle or domain posing as official support.
- Urgency — confirm now or lose your badge or account.
- A request for your password or a verification code, which support never needs.
How real verification works
Knowing the genuine process makes the scam obvious. Verification is handled inside the official app or site, through your account settings — not by clicking a link in a surprise message. The platform’s real support team does not DM you asking for your password, and never needs a verification code that was sent to you. If keeping or getting a badge supposedly requires you to log in through a link or share a code, it is a phishing attempt, no matter how official it looks.
Real verification lives in your settings, not in a stranger’s DM. The platform will never message you for your password or a code to “keep your badge” — that request is the scam itself.
How to protect yourself
Never log in through a link in a verification message, and never share a code sent to your phone. Check badge or verification options only inside the official app. If you clicked and entered your password, change it immediately and review your account’s active sessions. The strongest safeguard is a unique password from our password generator on every account plus two-factor authentication, so even a captured password cannot hand over your account.
Frequently asked questions
Is a verification badge message a scam?
An unsolicited message offering a badge or threatening to remove yours, with a link to log in or a request for a code, is almost always a scam. Real verification is handled inside the official app’s settings, not through surprise messages.
Does a platform ever DM me about verification?
Genuine support does not DM you asking for your password or a verification code to grant or keep a badge. Any such message is phishing. Handle verification only through your official account settings.
What if I already entered my password?
Change your password immediately from the official app, review and end unfamiliar active sessions, and turn on two-factor authentication. If a code was shared, contact the platform’s real support and secure any linked accounts.