Technology
Elon Musk scam tricks victims on Facebook with Tesla hoax
NEWYou can now listen to Fox News articles!
It started with a Facebook friend request and a message that felt too good to be true.
Then, it quickly turned into an expensive lesson in online deception.
The woman this happened to in Jensen Beach, Florida, wrote us saying, “He kept telling me it was my lucky day. I had just won a new white Tesla and $250,000 in cash. All I needed to do was send him an Apple Gift Card for $200. So I did. Well, $800 later, he wanted more to pay for the broken-down truck that was on its way to my house to deliver my winnings.”
The scammer, posing as Elon Musk, used flattery, fake urgency and a convincing profile to lure the victim into a carefully staged hoax. Behind the big promises was someone who walked away with hundreds of dollars in untraceable gift cards. Here’s how the scam works and how you can avoid falling for it.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join.
A CLOSE CALL WITH A FACEBOOK SCAM THAT TRIED TO STEAL CREDIT CARD INFO
A person trying a Tesla vehicle. (Kurt “CyberGuy” Knutsson)
How the Elon Musk Tesla Facebook scam works
This type of scam often begins after someone posts about Musk, Tesla or cryptocurrency. Scammers monitor public Facebook activity, then send a friend request from an account using Musk’s name and photo. The profile may look legitimate, with copied images, reposted news articles or AI-generated content.
Once the request is accepted, the impersonator encourages the victim to continue the conversation on WhatsApp. From there, the scam unfolds in a way that feels casual but calculated. The victim is congratulated on being randomly selected to win a brand-new Tesla and a large cash prize, often around $250,000. But before the reward can be delivered, they are told to cover “delivery fees” using an Apple Gift Card.
In the case of the woman from Jensen Beach, she sent multiple gift cards totaling $800 before realizing the story was a setup. After claiming that a delivery truck had broken down, the scammer requested even more money. That’s when she recognized the pattern and blocked the account. But unfortunately, by then, the funds were already gone.
A Facebook app on a smartphone. (Kurt “CyberGuy” Knutsson)
SPOT FAKE ONLINE STORES AND AVOID FACEBOOK SUBSCRIPTION SCAMS
Why scammers prefer gift cards in online scams
Gift cards are one of the most common tools used in scams because they are fast, anonymous, and nearly impossible to recover once the code is shared. Scammers often claim that the cards are needed to cover fees, unlock a prize or verify your identity. Once a scammer has the code, they can do a few things:
- Spend the balance immediately on digital goods or services
- Sell the card on online marketplaces at a discount
- Launder the funds through reselling sites or gaming platforms.
Apple Gift Cards are frequently used because they are easy to find in stores and can be used for high-value digital purchases. But scammers also use Google Play, Amazon, Steam and Visa prepaid cards, depending on what they think the victim can access. These requests usually come with urgency. Victims may be told to stay on the phone while buying the cards or to scratch off the back and send a photo of the code right away. That sense of pressure is designed to override second thoughts. If anyone you do not know asks for payment in gift cards, it is a scam. No legitimate organization or contest will ever ask for them as payment or verification.
META FACES INCREASING SCRUTINY OVER WIDESPREAD SCAM ADS
Other Elon Musk impersonation scams to know about
Scams that impersonate celebrities or public figures have become increasingly common. Criminals use well-known names to create a false sense of trust and urgency. Once they have your attention, they use that trust to steal money or personal information. Musk is one of the most frequently impersonated figures in scam campaigns. His name is widely associated with innovation, crypto and high-value giveaways, which makes him a perfect target for fraudsters trying to appear legitimate. Some of the most common Elon-related scams include:
- Energy-saving device scams: One scam used Musk’s photo and fake testimonials to promote a suspicious energy product through Facebook ads. The ad was styled to look like a real news article, which made it harder to spot as a fake. Read more about the energy-saving scam here.
- Fake investment opportunities: In one case, a scammer convinced a woman she was in a relationship with Musk and persuaded her to invest in a business venture. She lost over $26,000 before realizing it was a hoax.
- Crypto giveaway livestreams: These scams often appear on YouTube or in ads, claiming that Musk is hosting a giveaway. Victims are told to send cryptocurrency with the promise of getting double in return. In reality, the money is taken and never returned.
What ties these scams together is the use of a familiar face to lower suspicion. The scammer may use deepfake video, AI-generated voice clips or doctored screenshots to make the offer feel more real. Once the target engages, the pressure begins. Victims are asked to send money, act quickly and avoid telling anyone. If a message or ad involves a celebrity offering free money, discounted products or special access to a private opportunity, it is almost certainly a scam.
WHAT IS ARTIFICIAL INTELLIGENCE (AI)?
A Facebook app on a smartphone. (Kurt “CyberGuy” Knutsson)
AI CYBERSECURITY RISKS AND DEEPFAKE SCAMS ON THE RISE
How to protect yourself from Elon Musk gift card scams
These scams rely on quick decisions, emotional reactions and a false sense of trust. Slowing down and checking for warning signs can help you stay safe. Here are some practical steps:
1. Never send gift card codes to anyone you do not know: If someone asks for Apple, Amazon or Google Play cards as payment or verification, it is a scam. No real prize, agency or company will request gift cards.
2. Be skeptical of prize claims from celebrity accounts: Musk is not messaging people on Facebook to give away Teslas or cash. If the profile is unverified or the offer feels random, trust your instincts and ignore it.
3. Do not move conversations to private apps like WhatsApp or Telegram: Scammers often push for this because these platforms have fewer safeguards, no public comment threads and limited reporting tools. Once the chat moves off Facebook, it becomes much harder to verify or report what’s happening. If someone you do not know insists on switching platforms, it’s usually a sign they are hiding something.
4. Consider using a data removal service: If a scammer has targeted you or impersonated you online, chances are your personal information is floating around on data broker websites. These sites collect and sell everything from your home address to your family members’ names, making you a bigger target for future scams. Data removal services can help you scan the web and request the deletion of your info from these brokers. While you can do this manually, it’s time-consuming. Services like Incogni offer subscriptions that automate the process and monitor for new exposures. If you’ve been scammed or suspect your information was leaked, using a data removal service adds another layer of protection and peace of mind. Check out my top picks for data removal services here.
Get a free scan to find out if your personal information is already out on the web
5. Watch for common red flags: Be cautious of sudden friend requests from unfamiliar accounts, vague messages that mention surprise winnings, poor grammar or any pressure to act quickly. Scammers often use emotional triggers to override your judgment. If something feels off or too convenient, it probably is.
6. Install strong antivirus software on all devices: Some impersonation scams include links to phishing pages or malware. Antivirus tools can block these threats before they reach your inbox. The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices.
7. Use two-factor authentication and a password manager: If a scam compromises your login credentials, two-factor authentication (2FA) can block unauthorized access. A password manager also helps protect against reused or weak passwords. Get more details about my best expert-reviewed Password Managers of 2025 here.
8. Report the scam right away: Use Facebook’s reporting tools to flag fake profiles or messages. You can also file a complaint with the FTC at ReportFraud.ftc.gov to help warn others.
BEST SECURITY CAMERAS TO MONITOR AND IDENTIFY CAR VANDALISM
Kurt’s key takeaways
Scammers are using Musk’s name to run fake prize scams, investment traps and Facebook impersonation schemes. In one case, a reader lost $800 after being promised a Tesla and $250,000 in cash, but only if they sent Apple Gift Cards first. These scams rely on trust, speed and celebrity recognition. The real Musk is not sending private messages to strangers. If someone contacts you about a prize and asks for money or gift cards, it is a scam. Report it, block the account and help others stay alert.
Have you ever been contacted by someone pretending to be Elon Musk? Let us know by writing to us at Cyberguy.com/Contact.
For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter
Ask Kurt a question or let us know what stories you’d like us to cover
Follow Kurt on his social channels
Answers to the most asked CyberGuy questions:
New from Kurt:
Copyright 2025 CyberGuy.com. All rights reserved.
SpaceX and Cursor are now working closely together to create the world’s best coding and knowledge work AI.
The combination of Cursor’s leading product and distribution to expert software engineers with SpaceX’s million H100 equivalent Colossus training supercomputer will allow us to build the world’s most useful models.
Cursor has also given SpaceX the right to acquire Cursor later this year for $60 billion or pay $10 billion for our work together.
NEWYou can now listen to Fox News articles!
If you’ve ever clicked “Check for updates” and trusted what you saw, you’re not alone. That’s exactly what this latest scam is counting on.
The page mimics official branding, includes a believable knowledge base number and presents a big blue download button that feels familiar.
The catch? The download installs malware designed to steal passwords, payment details and account access.
According to researchers at Malwarebytes Labs, a cybersecurity research and threat intelligence team inside Malwarebytes, the site uses a typosquatted domain that looks close enough to a real Microsoft URL to fool a quick glance. That small trick is often all it takes.
APPLE APP PASSWORD SCAM EMAIL WARNING
Cybersecurity researchers warn a fake Microsoft update site uses a look-alike URL and a familiar download button to deliver data-stealing malware. (Michael Nagle/Bloomberg via Getty Images)
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Why this fake Windows update malware slips past detection
At first glance, nothing seems off. The file looks like a standard Windows installer. It even lists “Microsoft” in its properties. That’s where this attack gets clever. Instead of using obvious malicious code, the attackers built the installer with legitimate tools and layered the attack in stages. Each piece looks harmless on its own.
Here’s what’s happening behind the scenes:
- The installer launches what appears to be a normal app
- That app quietly runs hidden scripts
- A disguised process loads a full Python environment
- Data theft tools activate in the background
Because each step looks routine, many security tools fail to flag it right away. Researchers also noted that antivirus engines initially showed zero detections for key parts of the attack. That does not mean the file is safe. It means the malicious behavior is well hidden.
What this fake Windows update malware is stealing
Once installed, the malware gets to work fast. It collects details about the infected device, including location and IP address. Then it reaches out to remote servers to receive instructions and upload stolen data.
The targets include:
- Saved browser passwords
- Login sessions and cookies
- Payment details
- Discord account tokens
It even tries to shut down other processes on your system to avoid interference while it works. In some cases, it modifies apps like Discord to intercept account activity in real time.
How the fake Windows update malware stays on your system
This malware is designed to stick around. It creates entries that look like normal system processes, so they blend in. One registry entry mimics Windows Security Health, which most users would ignore. It also drops a shortcut in your startup folder with a familiar name like Spotify. That makes it easy to overlook. Two different persistence tricks mean it can survive a reboot and keep running.
FAKE WINDOWS UPDATE PUSHES MALWARE IN NEW CLICKFIX ATTACK
A fake Windows update page is tricking users into downloading malware that steals passwords, payment details and account access. (Beata Zawrzel/NurPhoto)
Why this fake Windows update scam feels so real
There’s a bigger trend behind this. Researchers say campaigns like this often target regions where large data breaches have already exposed personal information. When attackers already know your name, provider or habits, they can build scams that feel tailored to you. That makes a fake Windows update page far more believable than a generic phishing email.
It also highlights something important. Today’s malware often hides inside legitimate tools and trusted frameworks. That makes it harder to detect and easier to trust. This campaign shows how far scammers have come. They are no longer relying on sloppy emails or obvious fake links. Instead, they are building layered attacks that look and behave like trusted software.
Even experienced users can get caught off guard when everything appears normal. The biggest takeaway is simple. A clean scan result or a familiar interface does not guarantee safety.
Microsoft says it’s aware of the threat
Microsoft confirmed it is tracking this type of activity and urges users to be cautious when downloading updates from unfamiliar sources.
“We are aware of reports of fraudulent websites impersonating Microsoft, and we actively work to detect and disrupt malicious activity across the internet,” A Microsoft spokesperson told CyberGuy. “We encourage customers to be cautious of unexpected prompts or downloads and to verify that they are interacting with legitimate Microsoft domains. As a best practice, we recommend users verify the legitimacy of a link by going directly to our website from your own saved favorite, from a web search, or by typing the domain name yourself.”
For more guidance on how to protect against online phishing scams, you can refer to Microsoft’s official support page at support.microsoft.com.
MICROSOFT CROSSES PRIVACY LINE FEW EXPECTED
A convincing Windows update scam is spreading malware that can grab saved passwords, cookies, payment data and Discord tokens. (Todor Tsvetkov/Getty Images)
Ways to stay safe from fake Windows update malware
You don’t need to be a security expert to avoid this. A few habits make a big difference.
1) Only update Windows from your settings
Go to Settings > Windows Update and check for updates there. Avoid downloading updates from websites.
2) Double-check the URL
Real Microsoft pages use microsoft.com. Anything else, even if it looks close, should raise a red flag.
3) Be cautious with urgent update prompts
If a site or message pressures you to install an update, stop and verify it manually.
4) Use strong antivirus software with behavior detection
Traditional antivirus software, which often comes built into your device or as basic security software, mainly looks for known threats using signature matching, which means it can miss new or well-hidden attacks like this one. Strong antivirus software uses behavior detection to monitor what programs are doing in real time, helping flag suspicious activity even if the malware hasn’t been seen before. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com.
5) Use a data removal service to limit your exposure
If your personal information is already circulating online from past breaches, it can make scams like this more convincing. A data removal service helps reduce how much of your information is publicly available, making it harder for attackers to target you with tailored phishing attempts. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com
6) Turn on two-factor authentication
Two-factor authentication (2FA) adds a second layer of protection if your passwords are stolen.
7) Avoid downloading installer files from unknown sites
Legitimate updates rarely require manual downloads.
Kurt’s key takeaways
Fake updates are one of the most effective tricks because they tap into something we all trust. Keeping your system secure should not put you at risk, yet that’s exactly what attackers are exploiting here. The safest move is to slow down, verify where updates come from and stick to built-in tools whenever possible.
Are tech companies doing enough to keep fake updates from putting your data at risk? Let us know your thoughts in the comments below. Let us know by writing to us at Cyberguy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
We get a lot of questions about how The Verge works. And how The Vergecast works. And how we make money. And whether some of that money helps Nilay buy more jackets, several yachts, or something else entirely. So, every once in a while, we spend an episode of the podcast answering as many questions as we can.
On this episode of The Vergecast, Nilay and David are joined by The Verge’s publisher, Helen Havlak, to talk about ads, subscriptions, our website, our audience, and more. Then, Nilay and David answer some more questions about how we think about journalism, our relationship with Verge alumni, video podcasts, and (of course) Brendan Carr.
Thanks to everyone who sent us questions for this episode, and please keep them coming! You can always call the Vergecast Hotline (866-VERGE11) or send us an email (vergecast@theverge.com) with your questions, thoughts, feelings, and misgivings about everything we’re up to. We truly love hearing from you. And if you want to be part of everything we’re up to, and help make The Verge even bigger and better, the best thing you can do is subscribe! You even get all our podcasts ad-free.
Oh, and also, in case you missed it yesterday, be sure and check out our emergency pod on the news that Tim Cook is stepping down as Apple CEO. We’ll be talking more about the future of Apple on Friday’s show, too, so send questions if you have ’em!
-
New York1 hour agoTrump’s Immigration Crackdown Pervades Long Island Suburbs
-
Detroit, MI2 hours agoChris Simms projects Detroit Lions first-round NFL draft pick
-
San Francisco, CA2 hours agoSan Francisco sets $3.4B price tag for public takeover of PG&E
-
Dallas, TX2 hours agoGame Day Guide: Stars at Wild | Dallas Stars
-
Miami, FL2 hours agoMay a steadying presence as Cards hold off Marlins in Miami
-
Boston, MA2 hours agoTyrese Maxey, VJ Edgecombe flex in Boston: Takeaways from Celtics-76ers Game 2
-
Denver, CO2 hours agoMotorcyclist seriously injured in Denver hit-and-run crash – AOL
-
Seattle, WA2 hours agoBrock: 2 drafts fits at edge rusher for Seattle Seahawks