Cybercriminals create fake social media profiles to impersonate someone you know and then ask for money, personal information, or OTPs under false pretenses.