Why Is Facebook So Targeted?
Facebook concentrates fake profiles, a Marketplace with direct transactions and personal data that enables social engineering. Scammers clone profiles to defraud victims' friends, use the Marketplace to sell non-existent products and send phishing links that look official.
Profile Cloning
Scammers copy your photo and name to trick your friends
Fake Marketplace
Ads for products that are never delivered
Login Alerts
Notifications when someone accesses your account
The 5 Most Common Facebook Scams
Learn about the methods most used by criminals on the platform:
How It Works:
Scammers create a fake profile using your profile picture and name. They add your friends and pretend to be you. Then they ask for urgent money transfers, claiming they "changed their number" or are in "trouble."
How to Protect Yourself:
- Set your privacy so only friends can see your friends list
- Warn your contacts about this scam
- Create a "code word" with family members to confirm identity
- Report cloned profiles to Facebook
"Hey! It's me, [your name]. I switched phones and lost my contacts. I need an urgent favor — can you send me $500? I'll pay you back tomorrow, I promise!"
How It Works:
Listings for products at below-market prices (phones, laptops, vehicles). The seller asks for upfront payment and disappears without shipping the product. Or sends an empty package.
How to Protect Yourself:
- Prefer paying on delivery or use platforms with buyer protection
- Be suspicious of prices that are "too good to be true"
- Check the seller's profile age
- Search the seller's name and photos on Google
How It Works:
Messages or posts with links that appear to be from Facebook: "Your account will be blocked," "You were tagged in a photo," "Verify your identity." Clicking leads to fake pages that steal your login credentials.
Remember:
- Facebook never asks for your password via message
- Check the URL before entering credentials
- The official site is facebook.com
- Enable login alerts to detect suspicious access
How It Works:
Fake profiles of attractive people initiate virtual relationships. After weeks or months of conversation, they ask for money for a "medical emergency," "travel to visit you," "investment" or "release fee."
How to Identify:
- Never send money to someone you haven't met in person
- Be suspicious of anyone who avoids video calls
- Search their photos on Google (reverse image search)
- Money requests are a red flag
How It Works:
Fake pages impersonating famous brands promise prizes (iPhones, trips, cash) if you share, tag friends and click links. The links steal data or install malware.
Protection:
- Official brands don't run giveaways via inbox
- Never share banking details or passwords
- Check if the page is verified (blue badge)
Facebook Protection Checklist
Follow this guide to secure your account:
Enable Login Alerts
Receive email or app notifications when someone accesses your account from an unknown device or location. This lets you detect intrusions quickly.
Path: Settings → Security and login → Login alerts → Get notifications
Set Up Trusted Contacts
Choose 3 to 5 trusted friends. If you lose access to your account, they can help you recover it with security codes.
Path: Settings → Security and login → Set up trusted contacts
Enable Two-Factor Authentication (2FA)
Require a code from your phone or authenticator app in addition to your password to log in. This prevents attackers from accessing your account even if they have your password.
Path: Settings → Security and login → Two-factor authentication
Review Connected Apps and Websites
Remove apps and websites you no longer use. Each one may have access to your account data.
Path: Settings → Apps and websites → View all apps and websites
Adjust Profile Privacy
Limit who can see your photos, friends, posts and information. The less exposed you are, the harder it is to clone your profile.
Path: Settings → Privacy
Trusted Contacts: Your Safety Net
Trusted contacts are friends who can help you recover your account if you lose access. Choose people you know well and who have access to Facebook.
Account Hacked? Recover Now!
If you've lost access to your Facebook account:
Try to Reset Your Password
On the login screen, click "Forgot password?" and follow the process. Use the email or phone number linked to the account. If you have 2FA enabled, use recovery codes.
Use Trusted Contacts
If you set up trusted contacts, ask 3 of them for the codes Facebook sent. With these codes, you can reset your password.
Report the Compromised Account
Go to facebook.com/hacked on another device or browser. Follow the assistant to recover your account and remove unauthorized access.
Warn Your Friends
Via WhatsApp, Instagram or phone, let people know your account was hacked. The scammer may be committing fraud in your name (asking for money transfers, etc.).
File a Police Report
If there was financial loss, file a report online or in person at your local police station.