Cybersecurity Advisor logo Cybersecurity Advisor Annual cybersecurity ebook and regular online safety guidance
NordVPN Recommendation

Guidance Article

UK regulators move to curb scam ads and account hijacking on social media platforms

Published on 14 August 2026 | Cybersecurity


UK regulators move to curb scam ads and account hijacking on social media

UK regulators have taken a firmer line on scam advertising and the misuse of social media accounts for fraud. In July 2026, Ofcom set out proposed rules under the Online Safety Act that would make large platforms do more to prevent paid-for scam adverts, reduce the risk of accounts being hijacked and turned into scam channels, and create a faster route for trusted bodies such as law enforcement to flag fraudulent ads for removal. The Financial Conduct Authority (FCA) has also stepped up action against scams online, including social media takedown requests and warning notices. Ofcom Ofcom press release FCA

What happened

Ofcom’s July 2026 proposals were a direct response to the way scams now spread on social media and search platforms. The regulator said its research found that platform design can make it easier for fraudulent adverts to be served, and that account security is often weak, with unclear ways for users and advertisers to escalate problems. Ofcom’s proposal would apply to some of the UK’s most widely used services, including large social media platforms. Ofcom Ofcom press release

The government’s wider Fraud Strategy 2026 to 2029 also backs disruption measures, including removing scam social media accounts and blocking scam texts and websites at scale. A new disruption unit was announced in 2026 to help identify and shut down accounts and other infrastructure used by organised criminals. GOV.UK fraud strategy GOV.UK disruption unit announcement

Why it matters

Scam ads on social media can be highly convincing. They may use fake endorsements, cloned branding or impersonation to push fake investments, bogus crypto offers, shopping scams or cloned customer service pages. If a scammer takes over a genuine account, the posts can look even more trustworthy because they appear to come from a real person, business or creator. The FCA says investment scams remain a major threat and that many are promoted online and via social media. FCA FCA press release

For ordinary users, the risk is not only losing money. Hijacked accounts can be used to scam friends, family, colleagues or followers. That can cause reputational harm, identity theft and further fraud through stolen logins, password resets or fake support chats. Ofcom GOV.UK

Who may be affected

  • People who use Facebook, Instagram, TikTok, X, YouTube or similar platforms.

  • Anyone who clicks social media adverts for investments, shopping, crypto, jobs or services.

  • Small businesses, sole traders and creators whose accounts could be hijacked.

  • Older adults and people under pressure to act quickly, who are often targeted by fraudsters.

  • People whose personal photos or videos are reused in impersonation scams.

The FCA’s recent activity also suggests that financial promotions on social media remain a particular concern, so anyone considering an online investment should be cautious. FCA

Warning signs to watch for

  • Ads that promise unusually high returns, fast profits or “guaranteed” outcomes.

  • Messages that create pressure to act immediately.

  • Claims that a well-known figure has endorsed an investment or product, especially if the post looks slightly off.

  • Requests to move the conversation to WhatsApp, Telegram or another app.

  • Profile changes you did not make, such as a new email address, phone number or password.

  • Friends saying you sent them odd links or money requests.

  • Unfamiliar login alerts or password reset emails you did not request.

Ofcom’s research suggests platform design can make fraud easier to run, so a polished advert or a verified-looking account is not enough to prove something is genuine. Ofcom

What you should do now

  • Pause before clicking. Do not rely on the advert, caption or profile picture alone.

  • Check the sender separately. If a brand, friend or creator contacts you, verify through a different channel.

  • Use official websites and apps. Type the address yourself rather than following a social media link.

  • Turn on two-factor authentication. This makes it harder for attackers to take over your account.

  • Change passwords if anything looks wrong. Use a unique password for each important account.

  • Report suspicious posts and accounts. Use the platform’s reporting tools and, for phishing or scam websites, report to GOV.UK.

  • If money is involved, act fast. Contact your bank or card provider immediately if you think you have paid a scammer.

For scam texts, Ofcom advises forwarding them to 7726 so mobile providers can help block scam numbers. GOV.UK also provides routes for reporting suspicious emails, websites and phishing attempts. Ofcom GOV.UK

How to stay safer next time

  • Be sceptical of social media ads that mention urgency, exclusivity or celebrity backing.

  • Use strong, unique passwords and a password manager if possible.

  • Switch on login alerts so you are notified about unusual access.

  • Review privacy settings on your social media accounts and limit who can contact you.

  • Check the official register or regulator warnings before investing or buying.

  • Be wary of links in direct messages, even if they seem to come from someone you know.

  • Keep devices updated, since security patches can close known weaknesses.

If you run a business or creator account, it is worth making a simple recovery plan now: who controls access, which email address is linked, how you will verify a suspicious login, and how followers should be warned if the account is compromised. Ofcom’s findings suggest account security is often weak, so basic preparation matters. Ofcom

What may change next

Ofcom’s July 2026 proposals were a consultation, not the final word. That means the exact rules, timings and platform obligations may still change. What is clear, though, is that UK regulators are moving towards tougher expectations on social media firms when it comes to scam adverts, fraudulent promotion and account security. Ofcom press release GOV.UK fraud strategy

Key takeaway

Scam ads and account hijacking are now a major UK online fraud risk, and regulators are putting more pressure on platforms to prevent them. For readers, the safest response is still practical and personal: slow down, verify independently, use strong account security, and report suspicious activity quickly. Ofcom FCA

Sources

Back to Latest Advice & Guidance