What is Facebook spam?
Definition
Facebook spam is unwanted or deceptive content sent through Facebook, such as junk messages, fake friend requests, comment links and posts from hacked accounts, usually meant to sell something, steal logins or scam you out of money.
- Category
- Scams
- Also called
- spam on Facebook, Facebook spam messages
- Last updated
Spam on Facebook rarely looks like the old junk-mail kind. Most of it arrives as something that feels personal: a friend request from a stranger, a message from someone you know, a comment on your post with a link, or a tag in a post promising free money.
Where it comes from
Two sources cover most of it. The first is fake profiles, built to look like real people so they can send friend requests and messages. The second is real accounts that someone has taken over. The FTC warns that a scammer who has hijacked a friend's account can pitch you an investment or ask for money in your friend's voice, which is why a message from a name you trust still deserves a second look.
What it's after
The goal is usually money or access. Common hooks the FTC describes include unexpected investment tips, giveaways and "free money" offers, fake online sellers, and romance scams that start with a friend request. Links in spam often lead to a page that asks you to log in, which hands your password to the sender. A person who clicks and signs in can lose their own account, and the cycle repeats with their friends.
A concrete example
A friend you haven't talked to in a year messages you about an investment that is "working really well". You reply, they send a link and ask you to move money. Calling that friend on the phone, as the FTC advises, would have shown the account was hacked.
Why it matters beyond the annoyance
Spam accounts often work from what's visible on your profile: your name, employer, town and friend list. The more of that is public, the easier it is to make a message feel personal. Tightening who can see your profile cuts the material scammers have to work with.
Spam vs. phishing
Spam is the broad word for unwanted messages. Phishing is the narrower kind that tries to trick you into handing over a password or payment details. Much Facebook spam is phishing, but a plain ad you didn't ask for is spam only.
How to protect yourself
- 1
Limit who can see your profile and posts
Set your posts and friend list to friends only. The FTC recommends using privacy settings to limit who sees your posts. Our guide to making Facebook private walks through it.
- 2
Don't answer unexpected investment or giveaway messages
The FTC says unexpected messages about investing are almost always scams, and that free money offers on social media are scams too. Don't reply and don't click.
- 3
Call a friend who asks for money
If someone you know asks for money or pitches an offer, phone them first. Their account may have been hacked.
- 4
Report it and block the sender
Use Facebook's report and block options on the message or profile. You can also report scams to the FTC at ReportFraud.ftc.gov, and forward scam texts to 7726 (SPAM).
- 5
Act fast if your own account is hacked
Facebook says to go to facebook.com/hacked on a device you've used to log in before, then follow the recovery steps. Change the password on any other account that shares it.
- 6
Keep your details off people-search sites
Scammers use public details to make a message feel personal. Serus finds where your address and phone number are listed and removes them.
See where your personal data is exposed
Serus finds it on data brokers and people-search sites and removes it.
Frequently asked
Why am I getting spam messages on Facebook?
Fake profiles and hacked accounts send messages in bulk, and a public profile or friend list makes it easy to find you. Limiting who can see your profile and friend list reduces how often it happens.
Can Facebook spam hack my account?
Clicking a link is not always enough, but spam links often lead to a fake login page. If you enter your password there, the sender has it. If that happens, go to facebook.com/hacked and change your password.
Where do I report Facebook spam or a scam?
Use the report option on the message or profile inside Facebook. In the US you can also report a scam to the FTC at ReportFraud.ftc.gov.
Why did a friend send me a spam message?
Their account has probably been taken over. Let them know through another channel, such as a phone call, so they can recover it.
Sources
Something wrong or out of date? Tell us and we'll re-check it.