Most TikTok scams are trying to get your login details, a verification code or your card details. TikTok says it will never contact you to ask for your password, verification codes or other sensitive personal information, so any message claiming to be TikTok that asks for those is almost certainly a scam. Don't click the link, don't reply, and report it.
I see the same handful of scams come round again and again on every platform, and TikTok is no different. They work because they look official, they create a bit of panic, or they promise something that sounds too good to miss. Once you know what TikTok itself says it will and won't do, they get much easier to spot.
What TikTok says it will never ask you for
This is the single most useful thing to remember. According to TikTok's help page on phishing, a legitimate message from TikTok won't ask for:
- Your password.
- Verification codes.
- Personal information such as your name or contact details.
- Other sensitive personal information.
TikTok also points out that these messages can arrive by email, text message, in-app messages or other messaging apps. The channel doesn't make it safe. What matters is what the message is asking you to do.
Common TikTok scams and the red flag in each
| What you see | The red flag |
|---|---|
| A message saying your account will be closed unless you log in through a link | It's asking for your login details; TikTok says it won't do that |
| Someone asking you to read out or forward a code you've just been sent | That code is a key to your account; TikTok won't ask for it |
| A site promising free likes, fans, crowns or Coins | TikTok warns these third-party sites may be able to access your login information |
| A 'brand deal' or 'prize' that needs your card details first | It's asking for payment information up front |
| A link from a stranger in your DMs | TikTok says to verify any link before you open it |
The free followers one deserves a special mention, because it catches so many small creators. If a website promises you a pile of likes or Coins for nothing, it isn't doing you a favour. At best it's useless; at worst it's collecting the login you typed in. I've looked at the safer and riskier growth tools in my guide to TikTok follower apps, and at a related trick in the TikTok bonus for watching videos.
When TikTok really does contact you
TikTok does reach out in a few specific situations, and its help page explains how to check:
- Problems with a feature, such as recharging Coins. TikTok's Support team may send you an inbox notification inside the app. You can tell it's real if a pop-up at the bottom of the message asks you to accept the request. You may be asked for identity and bank documents to sort out the issue.
- Government, politician and political party accounts. TikTok may email about a verified badge application. The real email comes from an address ending in @tiktok.com.
- A suspected password leak. TikTok may contact you if it has reason to think your password has been compromised, and ask you to change it.
Even then, the safest habit is to go into the TikTok app yourself and check, rather than tapping a link in a message.
A sensible privacy step is covered in our guide to TikTok location settings.
What to do if you've already clicked
Don't panic, but don't wait either. TikTok's advice is to report a compromised account straight away, then secure it:
- Change your password. Pick a unique one with letters, numbers and special characters, and don't reuse it anywhere else. Once you change it, TikTok logs you out on every other device.
- Turn on 2-step verification. TikTok says it helps protect your account from unrecognised devices and third-party apps.
- Check the devices logged in to your account and remove any you don't recognise.
- Review your security alerts in Profile, then Menu, then Settings and privacy, Security and permissions, Security alerts.
If you've been locked out completely, start the Recover account request from the Forgot password? option on the login screen. My guide to changing your TikTok password covers the password side in full.
Want AI doing the heavy lifting in your marketing?
I build the systems that handle the boring 80 percent, so you get your week back. Done properly, with the human kept in.
Shopping scams are a separate risk
Not every TikTok scam is about your login. Some are about buying something that never arrives. If you're shopping inside the app, check the seller and the return terms before you pay. I've covered what to look for in whether TikTok Shop is legit.
My advice for business accounts
Brand accounts get targeted more, not less, because the scammers know a business will panic about losing its profile. Fake 'copyright warning' or 'verification' messages are a classic. Make one rule for everyone who touches your account: nobody types the TikTok password into anything except the TikTok app or tiktok.com, and nobody shares a code, ever. That one rule stops most of these before they start.
If you've already been caught out, read our guide to recovering a hacked TikTok account.
Frequently asked questions
Does TikTok ever ask for your password?
No. TikTok says it will never contact you to ask for your password, verification codes or other sensitive personal information. A message that does is likely phishing.
Are free TikTok likes or Coins websites safe?
No. TikTok warns never to trust third-party websites that promise free likes, fans, crowns, Coins or other incentives, as they may be able to access your login information.
How can I tell if a message is really from TikTok?
For feature problems, TikTok sends an in-app inbox notification with a pop-up at the bottom asking you to accept the request. Verification emails for political accounts come from an @tiktok.com address.
What should I do if I clicked a TikTok scam link?
Change your password, turn on 2-step verification, remove any devices you don't recognise and check your security alerts. Report the account if it's been compromised.
