Scams Posted From Your Business Account: What to Do Now

The worst part isn't losing access: it's that your audience trusts your brand and receives scams in your name. When fraud is posted from your business account, every minute counts to contain legal, financial, and reputational damage.

Phase 1: Containment (first hours)

1. Try remote logout or report the account as compromised on the platform.
2. Pause paid ads linked to the account if the attacker can spend budget.
3. Screenshot fraudulent posts with date and time.
4. Alert legal if customers report sent payments.
5. Post a warning on other official channels: «Our account was compromised, ignore messages».

Phase 2: Customer communication

Be direct: explain what happened, what your brand will not request (urgent transfers, codes, odd links), and how to reach you legitimately. One clear message on WhatsApp, email, and web reduces repeated support calls.

Fast transparency turns a trust crisis into proof of operational maturity.

Phase 3: Recovery and audit

• Recover access through official channels and rotate all credentials.
• Delete fraudulent posts and review sent direct messages.
• Investigate the vector: leaked credential, tricked employee, third-party app.
• Document timeline for insurance or legal reporting if applicable.

Prevention: before the next incident

Define a social response playbook: owners, communication templates, platform contacts, and criteria to pause campaigns. Review shared access and require strong authentication. Business accounts are infrastructure, not marketing accessories.

At Devson Labs we build digital incident response plans tailored to SMBs selling through social in Mexico.