Por Renan Filho · 2026-10-11**Lead**
A blue checkmark on social media—once a mark of authenticity and trust—has increasingly become a tool for scammers to deceive unsuspecting users. From fake cryptocurrency giveaways to phishing links disguised as official announcements, verified accounts are being hijacked, rented, or even purchased to lend credibility to fraudulent schemes. Despite renewed efforts by platforms like X (formerly Twitter), Instagram, and Facebook to tighten verification processes, the problem persists, costing victims millions of dollars annually.
**Contexto**
Verification badges were originally introduced by Twitter in 2009 to confirm the identity of public figures, journalists, and brands, reducing impersonation risks. For over a decade, the process was opaque but largely trusted—accounts were verified based on notability and authenticity. That changed in 2022 when Elon Musk acquired Twitter and launched the paid X Premium subscription, granting the blue checkmark to anyone willing to pay. The move flooded the platform with verified accounts, many of which had no public standing.
Other platforms followed suit. Meta introduced Meta Verified for Facebook and Instagram, a subscription service that offers a blue badge after identity verification using a government ID. While these programs require official documents, the verification does not guarantee the account’s activity is legitimate. Hackers have repeatedly targeted verified accounts, gaining access through phishing or SIM swapping, then using the badge to promote scams. In 2024, a wave of verified X accounts was compromised to promote fake Solana tokens, causing rapid losses before the posts were taken down.
Scammers also exploit the grey market: third-party services offer to “rent” verified accounts for a few hours, charging a fee for a post from a trusted handle. This underground economy has grown as verification became commoditized. Security researchers have documented cases where verified accounts with tens of thousands of followers were temporarily used to solicit payments for nonexistent investment opportunities.
**Analise**
The core issue is that verification no longer signals trustworthiness—it signals only that the owner paid a fee or once was notable. Users conditioned to equate the blue check with safety are lowering their guard. A verified account that posts a link to a fake login page looks more legitimate than an unverified one, even if the page is designed to steal credentials. Scammers capitalize on this cognitive shortcut.
Moreover, the financial incentive for platforms to sell verification creates a conflict of interest. X Premium costs $8 per month for individual users, while Meta Verified charges $11.99 on the web. For scammers, the cost is trivial compared to the potential payoff. Even when fraudulent verified accounts are reported and removed, new ones appear quickly. Automated systems are often slow to detect abuse because the accounts meet the literal requirement of having a verified identity document.
The impact extends beyond individual financial loss. Trust in social media as a reliable source of information erodes further. Reputation damage to brands whose accounts are taken over can be severe. Law enforcement agencies in the United States, including the FBI and the Federal Trade Commission, have issued consumer alerts warning about verified account scams. The FTC has noted that impersonation scams, which often use verified accounts as a disguise, remain among the top fraud categories.
Some platforms are experimenting with additional layers of authentication. For example, X now displays “Organization” badges for official corporate accounts, and Instagram has rolled out notes during Stories to flag accounts that were recently verified. However, these measures remain incomplete. Scammers constantly adapt, using deepfake photos and AI-generated supporting documents to bypass identity checks.
Until verification is decoupled from payment or augmented with behavioral verification—such as requiring multi-factor authentication for any post containing links—the risk will remain. Users must treat verified accounts with the same caution as any other, examining the content critically before clicking or transferring money.
**Fontes**
This article is based on publicly available reports from the Federal Trade Commission (FTC) on impersonation scams, security advisories by cybersecurity firms such as Malwarebytes and BleepingComputer, news coverage from Reuters and The Verge on X verification changes, and consumer alerts issued by the FBI’s Internet Crime Complaint Center (IC3).