Paid placement is not an endorsement
An advert can appear because space was purchased and targeting criteria were met. Its presence does not prove the advertiser’s identity or claims.
Technology, platforms and channels
Social media, online adverts and platform safety
Social media and online advert scams can use feeds, targeting, promoted posts, messages, groups and account signals to shape what people see and trust. A post being promoted, verified-looking or widely shared does not prove who is behind it or whether the requested action is safe.
Page T-010Guidance pageReviewed 29 August 2026
Key Guidance
Treat the platform as the place where content was delivered—not as a guarantee that the content, advert, account or opportunity is genuine. Verify important claims and transactions outside the post or message.
Start with Key Guidance for the short answer. Then read the sections that match what happened and what you need to do.
Understand the issue
Why this matters to you
Online services connect genuine organisations, creators, communities and advertisers at great scale. The same features can also provide reach, targeting, social proof and rapid movement into private contact.
Account signals can be misunderstood
Verification marks, follower counts, age, mutual contacts and posting history may have limited meanings or may belong to a compromised account.
Feeds create repeated exposure
Seeing similar claims, testimonials or opportunities repeatedly can make them feel confirmed even when the sources are connected or copied.
Private contact reduces outside challenge
A public post may move quickly into direct messages, encrypted chat, a private group or an external site where platform controls and witnesses are reduced.
Consequences and movement
What may happen next
The platform can be the Door, the Mask or part of the Path. Identify which role it is playing before treating familiarity with the service as evidence about the content.
An advert leads to an external page
The destination may request a purchase, investment, login, survey or identity details under branding that matches the advert.
A compromised account contacts its network
A real account can send false requests to people who already trust the name, history and mutual connections.
A group reinforces the claim
Comments, members and apparent success stories can create social proof around an opportunity or relationship.
Reporting removes one item, not every version
Accounts, adverts and domains can be recreated. Personal action still requires independent checking and account protection.
Practical response
What you should do
Use platform reporting and security controls, but make the safety decision by examining the identity, claim, route and requested action independently.
- Leave the supplied routeDo not use the advert’s link or a direct-message contact detail for verification. Find the organisation, person or product independently.
- Inspect what the account signal meansDo not assume a verification badge confirms every claim, that followers are genuine or that account age prevents takeover.
- Keep high-risk actions out of private pressurePause payments, investments, intimate disclosures, codes and account changes when the contact insists on secrecy or a private channel.
- Secure your own accountUse a unique password, enable two-step verification, review active sessions and confirm recovery details.
- Capture and report the contentSave the account name, advert, post, link, messages and time, then use the service’s report and complaint tools.
- Escalate the consequenceContact the bank, account provider or relevant organisation at once if money, sign-in details, identity information or access has been affected.
Look more closely
A trusted platform does not verify every advert or account
Familiar design and placement can lend credibility to content supplied by someone else. The account, claim, destination and requested action still need to be checked independently of the platform carrying them.
A feed, advert, result, group or message places the approach in view.
Relevance, identity, community, opportunity or repeated exposure builds attention.
An account, badge, creator, organisation or testimonial supplies apparent legitimacy.
Private chat, an external site, payment route or account action moves the pursuit forward.
Reporting, account recovery and warning connected people limit continued misuse.
Selected history
Historical cases and lasting lessons
From public posts to private scam journeys
Social networks, search and messaging expanded the ability to combine broad reach with targeted private contact, including investment, romance, shopping and impersonation scams.
Lasting lesson: The public content often opens the Door. The decisive actions occur after the journey moves to a controlled Path.
UK illegal-content safety duties
Under the Online Safety Act regime, regulated services have duties concerning illegal content, risk management, reporting and complaints, with extra duties applying according to service category and implementation stage.
Lasting lesson: Platform duties can reduce risk and improve reporting, but they do not turn every visible account, advert or post into verified content.
Transferable understanding
Patterns over time
Engagement and legitimacy are different
Popularity, repetition and emotional response show that content travels. They do not confirm who created it or whether its claims are true.
Real accounts can carry false requests
Account takeover preserves the history and relationships that make an approach believable.
Moderation is not a personal guarantee
Detection and reporting operate at scale and may occur after exposure. Users still need an independent route for high-risk decisions.
The same infrastructure supports many scam types
Shopping, investment, romance, job and impersonation scams can use the same adverts, groups, messages and account signals.
Plain-language answers
Common questions
Does a paid advert mean the platform checked the business?
Do not treat placement as proof of identity, authorisation or safety. Check the advertiser and destination independently before acting.
Can I trust a verified account?
A badge has a platform-specific meaning and accounts can be compromised. Verify any unusual or high-risk request through a separate known route.
Why do I keep seeing the same type of opportunity?
Advertising and recommendation systems can use engagement and targeting signals. Repeated exposure is not independent confirmation.
What should I do if my account sends scam messages?
Change sign-in details, enable two-step verification, remove unfamiliar sessions and connected apps, report the compromise and warn contacts through another route.
Use platform reporting and protect the affected route
Report the post, advert, profile or message to the service and preserve evidence first where safe. If the content caused payment, disclosure or account access, contact the affected provider at once and complete the relevant external report.
Scamology Insights
Learn to separate the platform from the pursuit
These apps, tools, books and courses can help you see which online signal first attracted attention, which account carried the false identity and when the conversation moved away from public checks. Product links are intentionally withheld in this production version.
Continue understanding
Explore related guidance
Evidence and currency