Fake Facebook emails: how to spot a phishing scam
Quick answer
A Facebook email that threatens to disable your account unless you click a link is likely phishing. Facebook says it won't ask for your password by email. Don't click, check the sender domain and report it to phish@fb.com.
- Comes by
- Email, Social media
- Pretends to be
- Last updated
How it works
Scammers send emails that look like they come from Facebook. Facebook is the impersonated company, not the sender.
The emails use false claims about account violations, warnings that your account will be affected unless you update it, or offers that look too good to be true, such as a lottery win. The link goes to a fake login page that captures your password.
Facebook says it will never ask for your username or password in an email. Genuine mail from Facebook or Meta comes only from fb.com, facebook.com, facebookmail.com, instagram.com, meta.com and metamail.com, so look closely for misspellings of these.
Red flags
- An email threatening to disable or delete your account
- A link to log in that you weren't expecting
- A sender address that looks like Facebook but is misspelled
- A request for your password or username
- An offer that's too good to be true
- Pressure to act within hours
Example message
Facebook Security: Your page has violated our community standards and will be disabled within 24 hours. Appeal now at [link] to keep your account.
What to do
- 1
Don't click or open attachments
Facebook advises not to open strange emails or attachments.
- 2
Check the sender and your settings
Confirm the sender domain is one of Facebook's. You can also check the recent emails page in Accounts Center under Password and security.
- 3
Report it
Forward it to phish@fb.com, and report it to the FTC.
- 4
If you entered your password, change it
Reset your Facebook password and turn on two-factor authentication. Change it anywhere else you reuse it. Our guide on what to do after a data breach covers the steps.
- 5
Check for changes
Review login activity, linked emails and phone numbers for anything you didn't add.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Phishing emails go to huge lists, and some are aimed at you using your name or the email tied to your accounts. Scammers get those from people-search sites and breach data. Serus finds the data brokers that list you and removes your listings, and alerts you when your email shows up in a breach, so fewer scammers can reach you.
More Facebook scams
Frequently asked
How do I know an email is really from Facebook?
Check the sender domain against Facebook's list, and look for the Facebook logo next to the address in supported mail apps. You can also check the recent emails page in Accounts Center.
Will Facebook ask for my password by email?
No. Facebook says it will never ask for your username or password in an email.
Where do I report a fake Facebook email?
Forward it to phish@fb.com and report it to the FTC.
I entered my password. What now?
Reset your password and turn on two-factor authentication right away.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
