Meta Support Impersonation Scam: How to Protect Your Facebook Account

Cybercriminals are actively impersonating Meta support to conduct phishing attacks against Facebook users, often threatening account deletion to induce panic and credential theft.

Warning signs

Urgent threats of account deletion or suspension

Unsolicited messages containing PDF attachments

Misspelled sender names or inconsistent branding

Vague claims regarding account status (e.g., simultaneously claiming an account is hacked and that it is impersonating others)

Pressure to act within a short timeframe, such as 24 hours

What you should do

Do not click links or download attachments from suspicious support messages

Verify account status directly through the official Facebook app or website settings

Enable two-factor authentication on your account using an authenticator app rather than SMS

Report the suspicious message using the platform's built-in reporting tools

Avoid sharing login credentials or personal information in response to unsolicited messages

A prevalent phishing campaign involves fraudulent messages that mimic official Meta support communications. These messages frequently use the Meta logo and claim that a user's account has been hacked or is impersonating others, creating a false sense of urgency with threats of permanent account deletion. Victims are often prompted to interact with suspicious PDF attachments or click links that lead to fake appeal forms or malicious websites designed to harvest login credentials, two-factor authentication codes, and payment information. Security experts note that these messages often contain telltale signs of fraud, such as misspelled account names, vague accusations, and unrealistic deadlines.

Alert: Meta Support Impersonation Phishing Scam

Warning signs

What you should do

Sources