A Queensland woman lost access to 20 years of memories after a scammer tricked her into revealing her phone number, an issue cybersecurity experts at the University of Southern Queensland, with campuses in Springfield and Ipswich, say is becoming increasingly common.
The incident occurred earlier this month when Louise Manning, a Queensland resident, fell victim to a Facebook scam. Someone posing as a friend messaged her, asking for her phone number.
Moments after sharing it, Manning’s Facebook account was hijacked. The scammer locked her out and used the account to send similar messages to her friends, two of whom were also hacked before the account was taken down. Manning described the loss of nearly two decades of memories, including cherished photos of her late sister, as deeply upsetting.
How the Scam Worked
Cybersecurity experts explained that the scam likely involved the misuse of personal details and mobile service manipulation. Manning initially believed she was conversing with an old friend and provided her phone number in good faith. Experts from the University of Southern Queensland noted that scammers often combine such details with other publicly available information, such as dates of birth or addresses, to impersonate victims.
Once they have the victim’s phone number, scammers intercept two-factor authentication (2FA) codes, granting them full access to online accounts. Like many others, Manning used SMS-based 2FA, a method experts warn is vulnerable to SIM-swapping tactics. This technique allows fraudsters to convince mobile providers to transfer control of a phone number to their device, enabling them to intercept messages.
Professor Neil Curtis from the University of Southern Queensland emphasised that these scams thrive because of social engineering, where scammers exploit trust and familiarity. He urged individuals to use authentication apps with biometric security rather than SMS-based codes to secure their accounts.
Community Impact and Rising Cases
Manning’s story is not an isolated incident. The Australian Signals Directorate reports over 21,000 identity-related scams nationwide this year, with financial losses for individuals averaging $30,700. Curtis noted that while losing sentimental items like family photos is devastating, the reputational damage caused by hacked accounts used for nefarious purposes—such as promoting fraudulent schemes—is equally concerning.
Meta, Facebook’s parent company, stated it had removed 1.2 billion fake accounts and hundreds of millions of spam posts this year. While Manning’s account was ultimately taken down after friends reported it, Meta’s lack of direct customer support has drawn criticism from affected users. Commenters online highlighted that platform policies must offer faster and more accessible solutions to help victims reclaim their accounts.
Protecting Yourself From Scams
Curtis encouraged families to adopt safety measures, such as using unique passphrases to verify the identity of loved ones during emergencies. He also advised against oversharing personal details online, including birth dates and other information often used to answer “secret questions” for account recovery. During high-risk periods like the lead-up to Christmas, he urged users to double-check suspicious messages, even if they appear to be from known contacts.
For Manning, the experience served as a harsh reminder of how quickly trust can be exploited. Although she was fortunate not to lose money in the scam, the emotional toll of losing treasured memories and having friends targeted through her account left a lasting impact.
Cybersecurity Experts Call for Awareness
Experts warn that these scams are evolving, aided by technological advancements like artificial intelligence. While social media platforms and mobile providers are crucial in preventing fraud, Curtis emphasised that individual vigilance is equally essential. Scammers rely on exploiting moments of carelessness, and being cautious about sharing information is critical to staying safe online.
Manning hopes her story will alert others to the risks of such scams. “It might seem small—just losing access to a Facebook account—but it can have much bigger consequences,” she said.
Published 26-Nov-2024
