Is this account alert from Facebook a scam?
No. Facebook is a legitimate social network operated by Meta. The danger sits inside and around it: scammers send fake account-disabled emails, hijack real profiles to hit friends up for money, and push bogus 'Meta Verified' offers that collect payment outside the platform. The good news: a few quick checks almost always tell a real Facebook message from a fake.
Genuine Facebook links lead to facebook.com, meta.com — but a link can be made to look real, so don't go by the link alone. Below is how genuine Facebook contact usually works, the scams commonly run in its name, the red flags that give a fake away, and an example to compare against. Got a message in front of you? Check it now for an instant verdict.
What a real Facebook message looks like
Genuine messages from Facebook link to facebook.com, meta.com. Treat a link to any other address as a warning sign.
- Facebook says that if you get a suspicious email, text or social media message claiming to be from Facebook, you shouldn't click any links or attachments, and should first check in your Facebook settings to see whether it came from Facebook; the safe habit is to open the app yourself or type facebook.com into your browser
- A message that threatens your account unless you click is a prompt to check inside the app rather than to click; Facebook lists a message asking for your urgent response because something is wrong with your online account among the signs to watch for in messages
- Don't treat the sender address as proof: Facebook says scammers frequently use deceptive email addresses that closely resemble official support accounts, and that you can view recent emails sent from Facebook in your Facebook settings
- A Messenger message asking for money or gift cards comes from whoever controls that account, which may no longer be your friend; Facebook says scammers may compromise existing accounts to try to deceive or defraud you or your friends out of money, personal information or access to your accounts
- Facebook's Marketplace guidance lists messages asking for verification codes sent to your phone or email among phishing scams, so don't pass a login or two-factor code to anyone who asks
What a genuine Facebook contact shouldn't do
- Send an email or SMS demanding you click a link to verify your account or stop it being disabled; Facebook describes a phishing email claiming to come from Meta that asks you to immediately click a link as a scam, so check your account in the app yourself
- Ask you to trust an email just because the sender address looks official; Facebook says scammers frequently use deceptive email addresses that closely resemble official support accounts
- Ask you to pay for 'Meta Verified' or any upgrade outside the official app or website
- Ask for your password or a two-factor code; no legitimate platform asks you to hand over a login code
- Threaten to delete your account within hours unless you act on a link; no legitimate social network operates that way
Common Facebook scams
- Scammers send emails claiming your Facebook account will be disabled unless you click a link and log in, directing you to a lookalike domain such as facebook-secure-login[.]example.
- Hacked Facebook accounts are used to message Australian friends with urgent stories about being stranded overseas and needing iTunes or bank transfer help.
- Fake Meta support emails arrive with subjects like 'Action required: unusual login detected' and contain links to harvest Facebook passwords on spoofed pages.
- Scam ads on Facebook itself promote fake 'Meta Verified' upgrades that ask users to pay outside the official app or website.
Red flags to watch for
- Any message that asks for your Facebook password or directs you to enter login details on a site that is not facebook.com.
- Urgent language about immediate account suspension or legal consequences that pressures you to click right now.
- Requests arriving via email or SMS rather than inside the Facebook or Instagram apps.
- Links that use domains other than facebook.com or meta.com, even if the text looks official.
- Messages supposedly from a friend asking for money or gift cards without any prior conversation about travel or trouble.
Facebook scam examples
These composed examples show how scams impersonating Facebook typically read, with the tells that give each one away. Compare them against anything you've received.
Subject: Your account has been scheduled for deactivation. We detected activity that breaches our Community Standards. To appeal and keep your account, confirm your identity within 24 hours at facebook-appeal-centre[.]example. Failure to respond will result in permanent removal.
What gives it away:
- The link points to a lookalike address rather than somewhere you reached by opening Facebook yourself, and a sender address that looks official isn't proof either
- Facebook describes a phishing email claiming to come from Meta that alerts you to issues with your account and asks you to click a link immediately; check your account in the app instead
- A 24-hour removal deadline is the kind of threat or urgent demand Facebook lists among phishing signs, for example 'Do this now or we'll close your account'
A Messenger message from a friend's real account: 'Hey, I'm stuck overseas, my wallet and phone were stolen. Can you buy some iTunes gift cards and send me the codes? I'll pay you back the second I'm home, please hurry.'
What gives it away:
- The familiar name and profile photo prove nothing, because the account itself may be in someone else's hands
- A friend or relative in an emergency who needs money is a pattern Facebook lists among the signs to watch for in messages
- Calling your friend on a number you already have takes a minute and settles whether it's really them; if a friend's message seems out of character, ring them before you reply
A sponsored post reads: 'Meta Verified is now open to Australian creators. Limited places this month. Secure your blue tick with a one-time verification fee at meta-verified-au[.]example.'
What gives it away:
- Don't pay for a Facebook feature through a link in an ad; open the app yourself and check what is on offer in your own account settings
- The address is a lookalike rather than somewhere you reached by opening the app or typing the site yourself
- Scarcity pressure ('limited places this month') is the urgency Facebook's own guidance says to slow down for: scammers often try to create a sense of urgency
Not sure about your message?
Paste the suspicious Facebook text or email and get an instant scam verdict, free.
How to verify a message from Facebook
Facebook's real website is facebook.com and the official app is the Facebook app. Reach Facebook through those channels, never through the details inside a message you're unsure about.
- Don't click the link, reply, or act on the message in any way
- Open the official Facebook app, or type facebook.com into your browser yourself, and check your notifications and security settings; Facebook says you can view recent emails sent from Facebook in your Facebook settings
- If you need help, use the Help Centre from inside the app, or type facebook.com/help into your browser yourself, never a link supplied by the message
- Report the suspicious message using the Report feature inside Facebook or Messenger so Meta can act on it
If you have been scammed in Facebook's name
Clicked the link, paid, or shared details? Act now. The first hour matters more than anything else you do later.
- If you entered your password on a fake page, change it immediately at facebook.com from a trusted device, turn on two-factor authentication, and change the same password anywhere else you reused it
- If you sent money or gift-card codes to a hijacked 'friend', call your bank straight away to try to stop or dispute the transfer, and warn the real friend that their account is compromised
- If you shared card details, ask your bank to block the card and dispute any charges
- If you handed over identity documents such as a licence or passport, contact IDCARE (idcare.org) for free identity support
- Report the scam to Scamwatch and ReportCyber using the links below, and forward any scam SMS to 7226 so carriers can block the sender
Where to report a scam impersonating Facebook
Received — or fell for — a message impersonating Facebook? Report it. It helps authorities and carriers shut the campaign down for everyone who gets the next one.
- Scamwatch — Report the scam to the ACCC's national scam service.
- ReportCyber — Report cybercrime and financial loss to the police.
- ACMA — Complain about scam texts and spam SMS, email or calls.
- Forward to 7226 (SCAM) — Forward the scam SMS to short code 7226 so carriers can block the source.
- IDCARE — Free identity and cyber support if your details were taken.
Facebook scam activity in 2026
Campaigns in Facebook's name currently run on two engines. The first is fear for your account: 'your page will be disabled', 'Community Standards violation', 'unusual login detected', all pointing to lookalike login pages that harvest passwords. The second is borrowed trust: hijacked profiles messaging friends for urgent transfers or gift cards, and sponsored posts selling fake 'Meta Verified' upgrades. The wrapping changes constantly; the mechanics never do. Every version needs you to act through the message instead of the platform. The habit that defeats all of them is refusing that shortcut: open the Facebook app or type facebook.com yourself, and confirm any 'friend in trouble' by calling their known number.
Frequently asked questions
I got a Facebook email saying my account will be disabled — is it a scam?
Treat it as a scam until you have checked. Facebook describes a phishing email claiming to come from Meta that alerts you to issues with your account and asks you to click a link immediately, and says that if you get a suspicious email or message claiming to be from Facebook, you shouldn't click any links or attachments. Check your account inside the Facebook app or at facebook.com instead.
A friend messaged me on Facebook asking for money — is this real?
It is almost certainly a scam from a hacked account. Contact your friend through another channel before sending anything.
How do I know if a Facebook login link is genuine?
Only ever enter your password after manually typing facebook.com or opening the official app yourself; never click links in emails or SMS.
Where should I report a fake Facebook message?
Report it inside the Facebook app using the Report option, then forward the email to report@support.facebook.com and lodge details at scamwatch.gov.au.
What are Facebook's real websites?
Facebook's website is facebook.com, and Meta's is meta.com. Don't judge an email by its sender address alone: Facebook says scammers frequently use deceptive email addresses that closely resemble official support accounts. The safest habit is to type facebook.com yourself or open the official app rather than following any link in a message.
What should I do if I entered my Facebook password on a fake page?
Change your password immediately at facebook.com from a device you trust, turn on two-factor authentication, and change that password anywhere else you reused it, especially your email. Then report the scam to Scamwatch (scamwatch.gov.au), and to ReportCyber (cyber.gov.au) if you lost money.
Scam message examples
Related scam types
Scams impersonating Facebook usually fit one of these patterns. Learn how each works:
Related brands
Other social names scammers impersonate — check a message from one:
Sources
- Social media scams (Scamwatch (National Anti-Scam Centre))
- Account or identity takeover scams (Scamwatch (National Anti-Scam Centre))
- Phishing scams: how scammers pose as trusted organisations (Scamwatch (National Anti-Scam Centre))
- Avoiding scams on Facebook (Facebook Help Centre (Meta))
- Protect yourself from phishing on Facebook (Facebook Help Centre (Meta))
- About scams on Facebook Marketplace (Facebook Help Centre (Meta))
This guide is general information, not legal or financial advice — always verify with Facebook through an official channel.