A sophisticated phishing scam is circulating on Facebook Messenger, impersonating Meta and threatening users with account deletion to steal their login information. The fraudulent messages, designed to look official, employ tactics such as misspelled sender names, urgent deletion threats, and fake PDF attachments.
Recipients of these messages, like one user named Angela who contacted CyberGuy, report receiving warnings that their Facebook account "will be closed in the future." These messages often cite vague accusations of unusual activity, fraud, or harassment, aiming to create panic and prompt immediate action. A key indicator of the scam is the sender's name, which may be misspelled, such as "Meta Verrified" with an extra 'r,' a common tactic used by scammers to bypass initial scrutiny.
The scam typically appears within a Messenger chat and may include the official Meta logo. However, experts advise users not to trust account warnings received through random chats. Legitimate notifications from Meta are usually found within the Facebook app's own notification or support inbox. The presence of end-to-end encryption on Messenger chats does not validate the sender's authenticity, as scammers can still operate within encrypted conversations.
Another significant red flag is the urgent nature of the threat, often giving users only 24 hours to respond before permanent deletion. This tactic is intended to bypass critical thinking and encourage rash decisions, such as clicking on malicious links or opening suspicious attachments. The scam often includes a PDF attachment, frequently named something official like "Facebook Account Support Center.pdf," which can contain phishing links or lead to scam websites.
Scammers target Facebook accounts because they often contain valuable personal information, memories, business pages, and financial details tied to advertising. Gaining access can allow scammers to lock users out, impersonate them, or conduct further fraudulent activities.
If a user believes they have fallen victim to such a scam, it is crucial to act swiftly. This includes changing the Facebook password, enabling two-factor authentication, reviewing active login sessions, and verifying contact information within the account settings. Securing the associated email account with a new password and two-factor authentication is also recommended. If payment information was compromised, banks or credit card companies should be notified immediately.
To avoid falling prey to these scams, users are advised to always verify warnings directly through the Facebook app or website, scrutinize sender names for misspellings, and be wary of urgent deadlines and suspicious attachments. Using a password manager and reliable antivirus software can add layers of protection. Experts also suggest utilizing data removal services to reduce the amount of personal information available online, which scammers often exploit to make their phishing attempts more convincing.