Facebook car scam alert: Hijacked accounts selling fake vehicles

Your friend posts a car for sale on Facebook. Great price. You trust them. You send a deposit. Only your friend never posted that entry; a scammer did that using his hijacked account. And your money is gone.

This scam has been around worldwide for over a year and Meta has done almost nothing to stop it. Fraudulent messages remain active for weeks, collecting deposit after deposit from people whose only mistake was trusting someone they actually know. (Source: Carscoops)

Scammers not only steal your money, but also use your friendships to do so.–Steve Rhode

How the hijacked account fraud works

This is what makes this scam so effective: the trust is already built in. You don’t buy from a stranger. You will see a car list posted by someone on your actual friends list.

The scam follows a predictable pattern:

• Scammers hack a real Facebook account through phishing or stuffing login details
• They place car ads under the victim’s name with emotional backstories
• Cars are priced well below market value: a 2019 Toyota Camry for $3,000, a 2018 Honda Accord for $3,000, a 2013 Jeep Wrangler for $5,000
• Interested buyers are asked to make a “fully refundable deposit” via Zelle, Cash App or Apple Pay
• The scammer claims to be “out of town” and cannot take calls due to “hospital rules”
• Multiple victims per account – dozens of deposits collected before the real account owner notices

Real cases: It’s not just deposits

The hijacked account scam is just one variant. Facebook vehicle fraud takes multiple forms and law enforcement is struggling to keep up.

Kansas City: Car sold and then stolen

In January 2026, Mamadou Diallo, 24, was charged with 14 felonies in Kansas City after he allegedly sold cars on Facebook Marketplace and then stole them back. At least eight victims lost a combined $24,000 or more. He used false titles and forged bills of sale. He now faces six counts of motor vehicle tampering and eight counts of forgery – up to 98 years in prison. (Source: KCTV5)

Jackson County Prosecutor Melesa Johnson put it plainly: As technology evolves, crime usually follows.

Tennessee: The Fake Loan Payoff Scam

The Lincoln County Sheriff’s Office warned in January 2026 about a scam in which a buyer contacts a seller, claims he will pay off the car loan over the phone and then sends a third party — described as a “cousin” or “driver” — to pick up the car. Days later, the finance company discovered that the payout was fraudulent. The vehicle and the scammer are both gone. (Source: RocketCityNow)

Red flags versus legitimate signals

How to protect yourself

• Call the person directly. If a friend offers a car for sale, pick up the phone and call them – not on Facebook Messenger, which the scammer controls. Use their real phone number.
• Never send deposits through peer-to-peer apps. Zelle, Cash App, Venmo, and Apple Pay are designed to send money to people you know and trust. They do not offer fraud protection for purchases.
• Perform a reverse image search. Right click on the car photos and search Google Images. Scammers reuse photos from real dealer listings.
• Insist that you want to see the car in person. A real seller will meet you. A scammer always has an excuse: out of town, in the hospital, at a funeral.
• Please check the chassis number before paying anything. Obtain and run the vehicle identification number via the NICB VINCheck (free) or a paid service such as CarFax.
• Meet at a police station. Many police forces have designated safe exchange zones. A legitimate seller will not refuse.
• Secure your own Facebook account. Enable two-factor authentication so YOUR account doesn’t become the next one used to scam your friends.

What to do if you’ve been scammed

• Don’t expect the payment app to pay you back; Zelle and Cash App transactions are generally final
• Don’t wait to report: scammers act quickly and close accounts quickly
• Don’t blame yourself: these scams are sophisticated and abuse human trust

Immediately follow these steps:

• Report it to the FTC at ReportFraud.ftc.gov
• Report the fraudulent message and account to Facebook
• File a police report (required for most recovery attempts)
• Contact your payment app’s fraud department
• If your account has been hacked, secure it immediately and alert your friends list

Why Meta doesn’t solve this

The most frustrating part of this scam is how avoidable it is. Meta has the tools to detect hijacked accounts that post sudden vehicle offers with below-market prices and urgent emotional language. The pattern is clear. But fraudulent messages routinely remain live for weeks, causing one victim to become another.

Buyers aged 45 and over are responsible for more than 75% of vehicle fraud reports. These are not careless people; they are people who trusted a platform that has failed to protect them.

Until Meta takes meaningful action, the responsibility is yours. Check everything. Don’t trust anything that you can’t confirm with a phone call to the actual person.

Sources

Frequently asked questions

How do I know if a Facebook car listing is a scam?

The biggest warning signs are prices significantly below market value, stories of emotional urgency (family member in hospice, military deployment), inability to meet in person or talk on the phone, and requests for deposits through Zelle, Cash App, or Apple Pay. If it seems too good to be true, call the person directly on their real phone number, and not through Facebook Messenger.

Can I get my money back after I make a deposit through Zelle or Cash App?

In most cases not. Zelle, Cash App, Venmo and Apple Pay are designed for transactions between people who know each other. These platforms generally do not offer fraud protection for purchase transactions. Once the money is sent, it is usually gone. This is exactly why scammers demand these payment methods.

How do scammers hijack Facebook accounts to carry out car fraud?

Scammers gain access through phishing emails, credential stuffing (using passwords leaked in other breaches), or social engineering. Once in an account, they post car ads with the real person’s identity, giving the scam instant credibility with everyone on that person’s friends list. Enable two-factor authentication on your own account to prevent this.

What should I do if my Facebook account has been hacked and used for car fraud?

Instantly change your password, enable two-factor authentication, and post an alert to your friends list from another account or via text message. Report the compromise to Facebook via their hacked account recovery page. File a police report and an FTC report at ReportFraud.ftc.gov. Let your friends know that car ads posted from your account do not come from you.

Why doesn’t Facebook stop these scams?

Despite having the technical means to detect suspicious patterns – such as hijacked accounts suddenly posting multiple vehicle listings at below-market prices – Meta has been largely unresponsive. Fraudulent messages routinely remain live for weeks, allowing scammers to collect dozens of deposits per compromised account. Until Meta implements meaningful security measures, buyers should protect themselves by verifying each listing individually.