How Hackers and Scammers Trick Young People
Young people receive fake messages, scam offers and attempts to steal their accounts every day.
These attacks rarely look dramatic. There may be no obvious warning or threatening stranger.
Instead, scams often appear as:
- Friendly messages
- Exciting offers
- Free rewards
- Urgent warnings
- New friendships
- Requests for help
- Messages from familiar accounts
Many scammers do not break into accounts using complicated computer code. They persuade people to give them the access they need.
They rely on human reactions.
If a scammer can make somebody feel excited, frightened, embarrassed or under pressure, that person may act before checking whether the message is genuine.
This lesson explains why young people are targeted, how common tricks work and what you can do to stay in control.
Why Young People Are Targeted
Young people are not targeted because they are unintelligent or careless.
Scammers target them because they:
- Spend time online
- Use games and social media
- Communicate with new people
- Value friendships and followers
- May respond quickly to messages
- May not have encountered every type of scam
Criminals design messages around things that young people care about, including:
- Gaming rewards
- Followers and popularity
- Friendships and relationships
- Competitions
- Money making opportunities
- Exclusive content
- Popular games and applications
When a new game or online trend becomes popular, scammers quickly create fake offers connected with it.
Understanding their methods makes you much harder to deceive.
The Main Rule Behind Most Scams
Most scams try to make you act quickly without thinking.
Scammers create urgency through:
- Fear
- Excitement
- Curiosity
- Embarrassment
- Pressure
- Fake emergencies
- Time limits
You might receive messages saying:
“Your account is about to be deleted.”
“You have won free rewards.”
“Somebody has hacked your account.”
“Reply immediately.”
“Do this before the offer expires.”
The faster you react, the less likely you are to check the message properly.
The moment you pause, the scam becomes weaker.
Do not allow a message from somebody else to decide how quickly you must act.
Impersonating Somebody You Know
A message may appear to come from a friend, relative or another familiar person.
It might say:
“Hi, it’s me. I lost my account.”
“Can you help me log back in?”
“Please vote for me in this competition.”
“I accidentally reported your account.”
The message could come from:
- A hacked account
- A copied profile
- A false account using stolen photographs
- A username with one character changed
- An AI generated profile
The scammer may want you to open a phishing link, send a verification code or reveal account information.
If a message seems unusual, verify it another way. Contact the person through a different service, telephone them or speak to them directly.
Do not rely on the profile photograph or username alone.
Verification Code Scams
A verification code is a temporary number sent to your telephone, email address or authentication application.
It may be used to confirm that you own an account or approve a login.
Scammers often invent excuses for needing this code. They may claim:
- They sent it to you by mistake
- They need it to enter a competition
- It will prove that you are a real person
- They are helping recover your account
- They work for the platform
Never share a login or verification code.
If somebody asks for one, they may already know your password and need the code to complete the takeover.
Real friends and legitimate support staff should not ask you to forward a private security code.
AI Voice and Video Impersonation
AI tools can imitate faces and voices using material taken from videos, livestreams, gaming chats or social media.
A scammer might send a voice message that appears to come from somebody you know. They may create a video showing a familiar person making a request.
The message may say:
“Please help me quickly.”
“Send me the code.”
“I need money urgently.”
A familiar voice is no longer absolute proof of identity.
If a request is unusual, urgent or involves money, passwords or personal information, verify it through another method.
You could ask a question only the real person would know or contact them using a number you already trust.
This topic will be examined in more detail in the lesson about deepfakes and AI generated trickery.
Fake Giveaways and Gaming Rewards
Gaming scams commonly promise:
- Free Robux
- Free V Bucks
- Rare skins
- Game currency
- Premium memberships
- Extra followers
- Exclusive items
To claim the reward, you may be asked to:
- Enter your login details
- Open a link
- Download software
- Scan a QR code
- Complete a survey
- Invite friends
- Provide personal information
The offer may include false comments from supposed winners to make it appear genuine.
A useful rule is that free rewards should never require you to reveal a password or security code.
Check promotions through the official game, application or company website rather than a link sent by a stranger.
Phishing Links
Phishing means tricking somebody into entering information on a fake website.
A message might say:
“Suspicious login detected.”
“Your account will be suspended.”
“Verify your age now.”
“Confirm your payment details.”
The link may open a page that looks almost identical to the real login screen. Any username, password or code entered there is sent to the scammer.
Warning signs include:
- An unfamiliar website address
- Small spelling changes in a familiar name
- Unusual endings in the address
- Shortened links hiding the destination
- Poor spelling or strange language
- Pressure to act immediately
- Requests for passwords or codes
Do not use a message link when you are uncertain. Close the message and open the genuine application or type the official website address yourself.
QR Code Scams
QR codes can take you directly to a website without showing the full address first.
Scammers may use messages such as:
“Scan to claim your reward.”
“Scan to unlock premium content.”
“Scan to vote for me.”
“Scan to verify your account.”
A QR code can lead to a fake login page, harmful download or fraudulent payment request.
Do not scan codes sent unexpectedly by strangers or unfamiliar accounts. If a promotion claims to come from a recognised company, confirm it through the company’s official application or website.
Fake Relationships and Sextortion
Some scammers create false friendships or relationships.
They may:
- Pretend to be your age
- Use stolen or AI generated photographs
- Give frequent compliments
- Build trust
- Ask to move into a private chat
- Request personal or intimate images
They may send a fake image first to encourage you to respond.
The conversation can then change into threats. The scammer may say that they will send an image to your friends, family or school unless you pay or provide more material.
This is known as sextortion.
If this happens:
- Stop responding
- Do not pay
- Do not send anything else
- Save messages and account details
- Block and report the account
- Tell a parent, carer, teacher or another trusted adult
You are not to blame, and you are not in trouble.
Scammers use embarrassment to keep victims silent. Asking for help removes much of their power.
Marketplace Scams
Young people selling clothes, trainers, game items or collectibles may receive fake payment messages.
A scammer may:
- Send a false payment screenshot
- Claim that payment is waiting
- Say they accidentally paid too much
- Ask for money to release the payment
- Request a refund before any money arrived
- Send a false delivery link
Never rely on a screenshot or email alone. Check the official selling platform or payment account directly.
Do not send an item until the genuine payment has been confirmed.
Be especially cautious if somebody wants to move the conversation or payment outside the platform.
Fake Moderators and Support Staff
Scammers sometimes pretend to represent:
- Gaming companies
- Discord servers
- Social media platforms
- Tournament organisers
- Technical support teams
They may threaten to suspend your account or promise to fix a problem.
They might ask for:
- Your password
- A verification code
- Remote access to your device
- A software download
- A payment
Legitimate support staff should not need your password.
Use the official help section within the application or website rather than trusting somebody who contacts you unexpectedly.
Malware Hidden in Downloads
Malware is harmful software designed to steal information, spy on activity or damage a device.
It may be disguised as:
- Cheat software
- Game modifications
- Free upgrades
- Custom skins
- Unlocked applications
- Pirated games
- Files sent through group chats
Installing an unknown file may allow criminals to:
- Steal passwords
- Access private messages
- Record activity
- Take control of accounts
- Use the device to target other people
Download games and applications from official stores or trusted sources. Be careful with instructions telling you to disable security settings before installing something.
An offer that promises something expensive or rare for nothing deserves extra caution.
How Passwords Are Stolen
Accounts are often taken over because passwords are weak, reused or revealed through phishing.
Easy passwords may contain:
- Birthdays
- Pet names
- Favourite teams
- School names
- Gamer tags
- Simple number patterns
A strong password should be:
- Long
- Difficult to guess
- Different for every important account
- Unconnected with public personal information
Using the same password everywhere is risky. If one service suffers a data breach, criminals may try that password on your other accounts.
A password manager can help create and store different passwords. Two step verification provides additional protection.
Never approve a login request you did not start.
Emotional Manipulation
Scammers often try to control how somebody feels.
They may:
- Become extremely friendly very quickly
- Give excessive compliments
- Make you feel special
- Create a fake emergency
- Ask for secrecy
- Make you feel guilty
- Become angry when questioned
Warning phrases include:
“Don’t tell anybody.”
“You are the only person who can help.”
“If you trusted me, you would do it.”
“You must decide now.”
“Prove that you care.”
Healthy friendships do not depend on threats, secrecy or pressure.
You are allowed to end a conversation at any time.
Why Your Account Has Value
You may think that your account is too small or unimportant to interest a criminal.
A stolen account can be used to:
- Trick your friends
- Pretend to be you
- Access private conversations
- Search for personal photographs
- Spread phishing links
- Steal game items
- Target other accounts
- Damage your reputation
An account looks more believable when it has a genuine history and real connections. That makes it useful to scammers.
Protect every account, even if it does not contain money.
Warning Signs
Pause immediately when:
- Somebody asks for a password or code
- A message creates sudden urgency
- An offer appears unusually generous
- Somebody asks you to keep a secret
- A friend’s message sounds unlike them
- A link or website address looks strange
- You are asked to download an unknown file
- Somebody requests private images
- A supposed helper asks for payment
- You feel uncomfortable or pressured
One warning sign does not always prove that something is a scam, but it is a reason to stop and check.
What to Do
If a message or account seems suspicious:
- Do not click links or download files
- Stop replying
- Save screenshots and account details
- Verify the message another way
- Block and report the account
- Change your password if necessary
- Turn on two step verification
- Tell a trusted adult
If you entered a password on a suspicious website, change it immediately through the genuine application or website. Change it anywhere else you reused it.
You are not foolish for being approached or almost believing a scam. These messages are deliberately designed to appear convincing.
How to Become Harder to Target
Useful safety habits include:
- Use strong and different passwords
- Enable two step verification
- Keep personal accounts private
- Never share login codes
- Avoid unknown links and downloads
- Verify unusual requests
- Review account recovery details
- Pause before reacting
- Limit public personal information
- Ask for help when something feels wrong
Even simple habits can stop many scams.
Final Thoughts
Hackers and scammers often succeed by making people react quickly and emotionally.
When you slow down, question an unusual request and verify it through another method, their influence becomes weaker.
Young people are targeted because they are active, social and connected. Those qualities are not weaknesses.
The goal is not to fear every message or avoid the internet. It is to recognise pressure, protect account information and know when to ask for help.
Every time you pause before clicking, reject a request for a login code or report a suspicious account, you protect both yourself and the people connected to you.
In the next lesson, we will examine the everyday habits that make social media safer.