Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

If your company account is posting cryptocurrency giveaways, investment offers, or payment demands you did not authorize, treat it as compromised. Start recovery through the platform’s official app or website, secure the account and its recovery channels, remove scam content when you regain control, and warn customers not to send money or share information. Use a separate, trusted company channel for warnings—not links in the suspicious posts.

Why a company crypto post may be a scam

A familiar company name or logo does not prove a post is genuine. The Federal Trade Commission (FTC) warns that scammers hack social media accounts to spread scams, and that a demand for cryptocurrency is a warning sign. Do not treat an investment pitch, giveaway, or payment request as legitimate just because it appears on your company account. See the FTC’s guidance on avoiding scams and its information about cryptocurrency and scams.

What to do, in order

  1. Start recovery from an official route

    Open the platform’s official app or type its website address yourself, then follow its compromised-account recovery process. Do not use recovery links sent in unsolicited messages, replies, or comments. The FTC’s hacked-account recovery guidance links to recovery instructions for several services. Procedures vary by platform and can change, so use the current instructions for the affected service.

  2. Secure the account and recovery channels

    Once you regain access, change the password to a strong, unique one, sign out of active sessions or devices, and turn on two-factor authentication if the service offers it. Verify that the recovery email address and phone number belong to the company and remain under its control. Review account activity for unfamiliar logins, settings changes, posts, or messages.

    Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
    #1 Best Overall
    Yubico - Security Key C NFC - Basic Compatibility - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified
    • POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
    • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
    • FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
    • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
    • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
  3. Contain related access

    Follow your company’s incident procedures and alert the appropriate IT or security contact. Change other compromised passwords, especially any password reused on multiple services. If a device may have malware, disconnect it from the network and have it assessed. The FTC’s small-business cybersecurity guidance covers steps businesses can take when responding to a cyber incident.

  4. Stop the scam from spreading

    When you can access the account, use the platform’s tools to remove or correct fraudulent posts and messages. Check both public activity and direct messages: people may have received a scam privately even if they never saw a public post. Identify who may have been exposed so your warning reaches the right customers and contacts.

    Rank #2
    Yubico - YubiKey 5C NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified - Protect Your Online Accounts
    • POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
    • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
    • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
    • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
    • PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
  5. Warn customers through a separate, trusted channel

    Post a clear notice on a company channel customers can find independently, such as your official website or another controlled account. State that the affected account was compromised, identify the fraudulent cryptocurrency request or link, and tell people not to send funds or provide passwords, payment details, or other sensitive information in response.

    If you email customers, omit hyperlinks so the warning does not resemble a phishing message. Give staff a consistent response to customer questions. The FTC advises businesses to notify customers promptly if scammers are impersonating them; its small-business cybersecurity guidance provides further detail.

    Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
    Rank #3
    Yubico - YubiKey 5 NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-A or NFC, FIDO Certified - Protect Your Online Accounts
    • POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
    • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
    • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
    • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
    • PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
  6. Report the account and preserve an incident record

    Report the compromised account and scam content through the platform. In the United States, report the scam to the FTC at ReportFraud.ftc.gov. For relevant business incidents, the FTC also identifies local law enforcement and the FBI’s Internet Crime Complaint Center (IC3) as reporting options in its small-business cybersecurity guidance.

    Keep screenshots, post and message URLs, timestamps, platform notifications, and report or support case numbers in the company’s incident record. Reporting is important, but it does not guarantee account restoration or recovery of cryptocurrency that someone has already sent.

    Rank #4
    Yubico - Security Key NFC - Basic Compatibility - Multi-Factor Authentication (MFA) Key, Connect via USB-A or NFC, FIDO Certified
    • POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
    • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
    • FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
    • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
    • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
  7. Check whether the incident reached beyond social media

    Review connected email, administrator accounts, payment systems, and other company accounts for unauthorized access. If personal information may have been exposed, involve the company’s incident-response, legal, and privacy leads promptly. Any notification obligations depend on the information involved and the laws that apply; there is no single deadline that can be stated without those details.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What to tell customers and staff

Keep the warning direct and actionable. For example:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Best Value
FIDO2 U2F Security Key Passkey Two-Factor Authentication (2FA) USB Key PIN+Touch (Non-Biometric) USB-A Type TrustKey T110
  • Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T110. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
  • Certified with the new FIDO2 standard, T110 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
  • Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
  • Fits USB-A port : Insert the T110 security key into the USB-A port of each service and log in conveniently with one touch
  • For the driver download and user guide, please visit TrustKey Solutions Home support page.

Our social media account was compromised. The cryptocurrency giveaway or payment request posted there was not authorized by us. Do not send cryptocurrency, click links in the post, or provide account or payment information in response. We are working to secure the account. For updates, visit our company website or contact us using the details published there.

Send the notice from a channel customers can verify independently. Do not ask recipients to follow links in the warning, and make sure staff use the same core message when replying to questions.

If the account recovery route is not working

Recovery depends on the service and on what the attacker changed. Use the platform’s official process and report the incident through its available support tools. If you can still sign in but an administrator, recovery address, or phone number was changed, document what you see and follow the service’s instructions for compromised accounts. Do not rely on a recovery offer sent by an unknown person. Meanwhile, use other trusted company channels to warn customers and continue checking for unauthorized access elsewhere.

What to do if someone sent cryptocurrency

Tell the person not to send any more funds and to contact the service or wallet provider they used as soon as possible. Preserve transaction details and messages for the incident record and reports. Do not promise that the payment can be reversed or recovered; the cited FTC guidance does not establish that reporting will recover cryptocurrency already sent.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.