Is this account alert from Facebook a scam?
Fake Facebook 'security alert' and 'account violation' messages are a common way scammers try to hijack accounts. A message, email or notification that looks like it's from Facebook can be genuine — but it can just as easily be a scam built to look identical. The good news: a few quick checks almost always tell a real Facebook message from a fake.
Genuine Facebook links only ever go to facebook.com, meta.com. Below is exactly what a real Facebook message looks like, the scams currently circulating in its name, the red flags that give a fake away, and a real example to compare against. Got a message in front of you? Check it now for an instant verdict.
What a real Facebook message looks like
Genuine messages from Facebook only ever link to facebook.com, meta.com.
- Genuine Facebook or Instagram messages about account security appear only inside the official Facebook or Instagram mobile apps or at facebook.com after you log in yourself.
- Meta never sends emails or SMS asking you to click a link to verify your account or prevent it being disabled.
- Real notifications from Facebook about login attempts or password changes arrive as in-app alerts or emails sent only from addresses ending in @facebookmail.com.
- Friend messages on Facebook Messenger that ask for money or gift cards are never initiated by Meta; the company does not facilitate person-to-person payments this way.
- Any password reset or two-factor code is sent only to the phone number or email address you have already saved in your Facebook settings.
Crucially, Facebook will never ask for your password or a login code by message, or threaten to delete your account within minutes.
Common Facebook scams
- Scammers send emails claiming your Facebook account will be disabled unless you click a link and log in, directing you to a lookalike domain such as facebook-secure-login.com.
- Hacked Facebook accounts are used to message Australian friends with urgent stories about being stranded overseas and needing iTunes or bank transfer help.
- Fake Meta support emails arrive with subjects like 'Action required: unusual login detected' and contain links to harvest Facebook passwords on spoofed pages.
- Scam ads on Facebook itself promote fake 'Meta Verified' upgrades that ask users to pay outside the official app or website.
Red flags to watch for
- Any message that asks for your Facebook password or directs you to enter login details on a site that is not facebook.com.
- Urgent language about immediate account suspension or legal consequences that pressures you to click right now.
- Requests arriving via email or SMS rather than inside the Facebook or Instagram apps.
- Links that use domains other than facebook.com or meta.com, even if the text looks official.
- Messages supposedly from a friend asking for money or gift cards without any prior conversation about travel or trouble.
Scam text examples
Here's a real example of a scam message impersonating Facebook, with the tell-tale red flags highlighted. Compare it against anything you've received.
Hi, your Facebook account will be disabled in 24 hours due to suspicious activity. Confirm your details here: facebook-secure-login.com/verify to keep your account active.
What gives it away:
- Any message that asks for your Facebook password or directs you to enter login details on a site that is not facebook.com.
- Urgent language about immediate account suspension or legal consequences that pressures you to click right now.
- Requests arriving via email or SMS rather than inside the Facebook or Instagram apps.
- Links that use domains other than facebook.com or meta.com, even if the text looks official.
- Messages supposedly from a friend asking for money or gift cards without any prior conversation about travel or trouble.
Not sure about your message?
Paste the suspicious Facebook text or email and get an instant scam verdict, free.
How to verify a message from Facebook
- Log in at facebook.com or open the official Facebook app and check notifications there.
- Visit meta.com and use the Help Centre links that appear only after you are signed in.
- Report suspicious messages directly through the Report feature inside Facebook or Instagram.
Where to report a scam impersonating Facebook
Received — or fell for — a message impersonating Facebook? Report it. It helps authorities and carriers shut the campaign down for everyone who gets the next one.
- Scamwatch — Report the scam to the ACCC's national scam service.
- ReportCyber — Report cybercrime and financial loss to the police.
- ACMA — Report scam texts and spam SMS or calls.
- Forward to 7226 (SPAM) — Forward the scam SMS to short code 7226 so your carrier can block the source.
- IDCARE — Free identity and cyber support if your details were taken.
Frequently asked questions
I got a Facebook email saying my account will be disabled — is it a scam?
Yes. Meta does not send emails demanding you click a link to save your account; always check directly inside the Facebook app or at facebook.com.
A friend messaged me on Facebook asking for money — is this real?
It is almost certainly a scam from a hacked account. Contact your friend through another channel before sending anything.
How do I know if a Facebook login link is genuine?
Only ever enter your password after manually typing facebook.com or opening the official app yourself; never click links in emails or SMS.
Where should I report a fake Facebook message?
Report it inside the Facebook app using the Report option, then forward the email to report@support.facebook.com and lodge details at scamwatch.gov.au.
Related scam types
Scams impersonating Facebook usually fit one of these patterns. Learn how each works:
Related brands
Other social names scammers impersonate — check a message from one:
This guide is general information, not legal or financial advice — always verify with Facebook through an official channel.