M/
Meta / Facebook
Social media account takeover (ATO) phishing using fake "Copyright Violation" or "Account Disabled" warnings.
Official indicators
M/
Meta / Facebook<security@facebookmail.com>
To: you@example.com
For your security, please Check Facebook Security Settings to complete this action.
Original URL: https://www.facebook.com/settings. Click or tap if you trust this link.
What real Meta messages look like
- Official security emails come from
@facebookmail.com,@meta.com, or@support.facebook.com - Meta does not notify you via Messenger before disabling an account
- Official business support is strictly at
business.facebook.com - They will never ask for your 2FA code or password in a support chat
Common spoof patterns
- "Urgent: Your account will be disabled in 24 hours" Messenger phishing
- "Copyright violation detected" lures targeting business page admins
- Fake "Meta Verified" notifications driving users to malicious forms