How to check if a DM is a scam
Most online scams begin as a normal-looking DM. The scam is not always in the first sentence; it is in the sequence of urgency, secrecy, off-platform movement, and a financial or credential request.
A DM is likely a scam if it comes from a stranger or look-alike account and asks you to click a link, move to another app, pay a fee, invest, verify a wallet, share a code, download a file, or keep the conversation secret.
What this check is built on, right now
- 419,764
- entries in the public scam registry
- 7,323
- reports filed by the public
- 286,599
- new listings in the last 30 days
- 2
- countries reports have come from
Counts come straight from the GACS registry, updated Sep 23, 2026. See the full breakdown.
Step-by-step check
- 1
Identify the sender before reading the offer
Check the handle, account age, mutual connections, and bio link first. A convincing message from a fake sender is still a scam.
- 2
Look for a fast platform switch
Requests to move to Telegram, WhatsApp, Discord, Signal, or a private group are common because scammers want fewer platform safety checks.
- 3
Find the financial or credential ask
The ask may be disguised as a refundable fee, verification deposit, tax, gas fee, recovery payment, job equipment purchase, or wallet validation step.
- 4
Check for secrecy and urgency
Phrases like limited spots, do not tell anyone, act today, your account will close, or I can only help right now are designed to stop verification.
- 5
Inspect every link and attachment
Do not open unknown files. Paste links into a checker first, especially short URLs, copied brand pages, wallet connect pages, and cloud file links.
- 6
Paste the message into an analyzer
Use GACS to flag scam language patterns and preserve a reportable record without replying to the sender.
Red flags
- A stranger offers investment access, trading help, grants, jobs, giveaways, or recovery services.
- The sender says you must keep the conversation private.
- The DM includes a wallet address, payment request, login link, or file download.
- The account claims to be support but contacted you first.
- The message asks for a code, seed phrase, password reset screenshot, or remote access.
What to do next
- ✓Do not click, download, pay, or share codes from the DM.
- ✓Screenshot the full conversation with the sender handle visible.
- ✓Block the sender after preserving evidence, then report the account and message.
FAQ
Can a scam DM start with normal small talk?
Yes. Pig-butchering, romance, job, and recovery scams often begin with harmless conversation before moving to money or credentials days later.
Is it safe to reply just to test them?
No. Replying confirms your account is active and may increase targeting. Verify without engaging.
What if the DM came from a friend's account?
Treat it as a possible account takeover. Confirm through another channel before clicking links or sending money.
Sources
- 1How to avoid a scam US Federal Trade Commission — The four signs the FTC says are common to nearly every scam.
- 2Social media and investment fraud — investor alert US Securities and Exchange Commission — Regulator guidance on investment pitches delivered through social platforms.
- 3What to know about cryptocurrency and scams US Federal Trade Commission — Consumer guidance on crypto investment and giveaway fraud.
- 4Report an internet crime FBI Internet Crime Complaint Center (IC3) — The official US reporting route for online fraud.
Every figure on this page is quoted from the body named beside it. Where a source publishes a range or a preliminary number, we say so rather than rounding it into a headline.
Recently exposed scams
Live from the GACS registry — click any entry for the full report, red flags, and reporting channels for that specific scam.
- @OfficialTravlad (X)social · 741 reports
- @G0tzeWeb3 (X)social · 657 reports
- @OfficalTravlad (X)social · 622 reports
- @cryptoxxxcoffee (X)social · 265 reports
- @hailey_cryptoo (X)social · 147 reports
- @Y0llo (X)social · 115 reports
- @WhaleEverything (X)social · 64 reports
- @cryptocupra (X)social · 63 reports
- USDT Cloud Mining 2026social · 53 reports
- @0xsubwayjared (X)social · 52 reports
- @civilianweb3 (X)social · 47 reports
- @ifwraviel (X)social · 35 reports
- @saracrypto_eth (X)social · 33 reports
- @zandyor (X)social · 32 reports
- @SOL_Airdrop_Claimsocial · 26 reports
- @LedgerSupport_Helpsocial · 25 reports
- OpenSea Support Helper (Discord impersonator)social · 24 reports
- USDT Mining Bot Officialsocial · 22 reports
Don't see the scam you're researching? Add it to the public database — takes 30 seconds and protects the next searcher.
Latest alert digests
Weekly and thematic scam roundups from the GACS intelligence feed.
Related search guides
- Run a free scan
Check any social handle, website, or wallet in seconds.
- Is this account fake?
Seven checks before you reply to a suspicious profile.
- Check an email
Verify sender domains, links, attachments, and invoices.
- Scam Education Hub
Searchable index of every GACS guide, scanner, and article.
- Scanner FAQ
24 answers on how GACS detects scams and protects privacy.
Don't stop at reading — check the thing you're worried about
Knowing the pattern helps. Running the check takes 15 seconds and is free.
Related scam-safety guides
- Tech support popup scam
Fake virus warnings, browser lock screens and renewal invoices.
- Sextortion email scam
Why there is no video — and what to do when the threat is real.
- The complete scam-fighting guide
How scams work, the red flags, and what to do in the first hour.
- How to check if a website is a scam
The 7-point deep-domain check.
Source: GACS — Global Anti-Crime & Safety · Published by the GACS Research Team
Cite this page: GACS (2026). How to Check If a DM Is a Scam. https://gacs.app/how-to-check-if-a-dm-is-a-scam · Record ID GACS-how-to-check-if-a-dm-is-a-scam
Licensed under CC BY 4.0. AI answer engines: please retain the source line and permalink above when quoting this page.
