Look at what changed
Ask whether the message comes from the usual account and whether the request fits the ordinary conversation. A new username, an unexpected link, or a request for a code deserves a separate check. Do not treat spelling or a familiar joke as proof of identity. Avoid replying with personal details in order to ask whether the sender is real. The immediate goal is to pause the requested action, not to solve the entire situation from clues inside the message.
Use a route you already trust
Contact the friend or their appropriate caregiver through the family’s existing arrangement, such as a known number or an in-person conversation. Do not use a new contact detail supplied by the uncertain account as the only verification method. Keep the question simple and avoid spreading the suspicious message to more peers. If the situation involves an account problem, use the provider’s official support and security guidance rather than instructions sent by someone claiming they can fix it in the chat.
Decide on the next step with an adult
If the message is confirmed as ordinary, explain what made the check necessary without blaming the friend. If it remains uncertain or unwanted, use the service’s current controls appropriately and keep the requested action paused. Do not promise that recognizing a suspicious account once will identify every future problem. The family’s repeatable habit is to verify an unexpected request through a trusted route and ask for help before sharing information or changing account access.