Filed under: Account takeover

A LinkedIn contact sent me a weird link — is their account hacked?

Q: A LinkedIn contact sent me a weird link — is their account hacked?

Possibly. A first-time or out-of-character message with a shortened or off-brand link is a classic sign a real person's account was taken over. The scammer uses the trust in their name. Don't click — verify with the person through another channel first.

Q: linkedin friend sent a strange link is their account hacked

Possibly. A first-time or out-of-character message with a shortened or off-brand link is a classic sign a real person's account was taken over. The scammer uses the trust in their name. Don't click — verify with the person through another channel first.

Q: how to know if a contact's account was taken over

Possibly. A first-time or out-of-character message with a shortened or off-brand link is a classic sign a real person's account was taken over. The scammer uses the trust in their name. Don't click — verify with the person through another channel first.

Q: should I click a link from a friend I haven't heard from

Possibly. A first-time or out-of-character message with a shortened or off-brand link is a classic sign a real person's account was taken over. The scammer uses the trust in their name. Don't click — verify with the person through another channel first.

Possibly. A first-time or out-of-character message with a shortened or off-brand link is a classic sign a real person's account was taken over. The scammer uses the trust in their name. Don't click — verify with the person through another channel first.

The exhibit

EXHIBIT · PASTED MESSAGE

Received via: LinkedIn EN

Hey, long time! Take a look at this, I think it’s perfect for you: sho.example/eexxaam

How to verify it yourself

Message or call the person on a different channel and ask if they really sent it.
Hover the link — shortened or look-alike destinations hide where you'll actually land.
If their writing style suddenly changed, treat it as compromised.
Report the message so the platform can check the account.

Check this message yourself

Or try a real one: