Can You REALLY Trust Your Facebook Friends?

8 comments

This is a guest post by Dennis Yu, CEO of BlitzLocal, a firm doing local Internet marketing .


disguise1This morning, I got a Facebook chat window pop-up from someone I barely know (yeah, don’t you hate that “popping” sound it makes?) It was from someone well-known in the industry, of whom I have many friends in common. I won’t out him here.

Note: I would have pasted in the whole chat below, but I don’t know how to retrieve that from Facebook, if that’s even possible.

He told me he had a bad night, having been robbed in London at gunpoint. He needed needs money ASAP to buy a ticket back from London to the states, upon which he would pay me back right away. I was actually considering helping him out, but was suspicious. He was typing like a 16 year old internet marketer, not an industry veteran.

So I asked him a question to prove whether he had expertise in local lead gen– to see if it was really him. “What is the importance of having multiple citations for your business to rank in Google 10 Pack results?” Silence– as he was probably trying to quickly Google the answer. Bam! Gotcha!

It took me a while to realize that he was hacked, as normally I’d assume that people I’m chatting and emailing with are who they appear to be.


This is WAY beyond just phishing or sending fake emails— this is logging in as them and engaging in a whole chat. Makes those Nigerian letters– you know, the ones you get from the wife of the deceased dictator, asking to help her reclaim the $16 million dollars– look like child’s play.


gonefishingI can just imagine a group of folks in the Philippines or India making $2 an hour, following a script to chat with folks. If you had 100,000 hacked Facebook accounts and each worker could do 20 chats an hour, then 50 workers could do 8,000 accounts a day. Thus, in 2 weeks, you could get through the whole list. If even 1% of the folks gave you $1,000, that’s $80,000 in revenue. The cost would only be $10,000, so that’s $70k in profit. Did I do my math right?


If the hacker had 10 million accounts, then they’d earn $7 million. Don’t laugh, since I know folks who have hacked Hi5, for example, for their entire user database of passwords. And just imagine if they got their conversion rate (victim rate) up to 5%, which is only 1 in 20– then they earn 5 times the amount, which is $40 million in gross revenue.


This is the new level of spam folks, so watch out. If you really want to make money in affiliate marketing and have no ethical or legal boundaries, there is a ton of money for you, as well as almost certain jail time. And, by the way, if you want to know of the biggest affiliate in the industry who has never gone to jail, talk to Scott Richter .

{ 1 trackback }

Tweets that mention Can You REALLY Trust Your Facebook Friends? EricSchechter.com EricSchechter.com -- Topsy.com
September 11, 2009 at 3:54 pm

{ 7 comments… read them below or add one }

1 kNERO September 11, 2009 at 10:29 am

Wow!!!..That’s crazy.. Thanks for the warning. I didn’t have the kNOWLEGDE that hackers can do thing in that nature.Only thought about myspace,twitter didn’t think “FACEBOOK” wow…

Reply

2 Udi Schlessinger September 11, 2009 at 11:47 am

This is really creepy. I heard that Facebook accounts can be hacked, but to use them in such a way? Unfortunately this has the potential of tricking many naive internet users. Also, some users accept a lot of friends they don’t know (we all have a couple of friends we don’t really know, no? but some have thousands), which raises the danger since the ‘fraudster’ can potentially be the person whom you’ve really befriended – no need for hacking at all in this case.
Udi Schlessinger´s last blog ..11 Twitter Sites and 1 Twitter Tool that You Really Need If You Use Twitter My ComLuv Profile

Reply

3 Eric Schechter September 11, 2009 at 3:51 pm

It’s really sad how many people out there will do whatever it takes to make a quick buck, even if it means preying on innocent, naive people. Hopefully everyone will do their due diligence (just as Dennis did) when put in a similar situation, and not fall for these evil Hackers’ tricks.

Reply

4 Murray September 11, 2009 at 12:44 pm

Yes you never know with who is who contacting you. I had someone I suspect to be just a fake person contact me on my blog yesterday but a whois look up found them out.
Murray´s last blog ..Social Media Disaster, Trust and Winning Trust Back My ComLuv Profile

Reply

5 Eric Schechter September 11, 2009 at 3:38 pm

I still can’t believe they did that. Instead of helping the situation with a
honest, genuine reply, they made things worse by acting shady and dishonest. It will be interesting to see how their reputation is affected in the space if they continue to do that.

Reply

6 Dennis Yu September 12, 2009 at 3:32 am

Just goes to prove that relationships are made in person and that convenience of being on-line isn’t what is always appears. Don’t take Facebook or any profile for granted.
Dennis Yu´s last blog ..Check your landing pages for this My ComLuv Profile

Reply

7 Keith Wilcox September 12, 2009 at 8:40 am

So, it’s a matter of phishing to get the accounts. Is prevention simply a matter of rotating passwords periodically? Once hacked what can a person do to regain control of their account?
Keith Wilcox´s last blog ..Chris Larrabee My ComLuv Profile

Reply

Leave a Comment

CommentLuv Enabled

Previous post: Clickbooth: Are you ready for your dream job?

Next post: Are you ready for IZEAFest?