March 15, 2025

How to Protect Your Social Media Account as Phishing Rises

Article Contents

• How can you spot phishing?
• What does a phishing email like this look like?
• Prevention matters before it is too late
• What should you do if you fall victim to phishing on Facebook?

Recently, phishing attacks targeting admins of Facebook pages, Instagram profiles and advertising accounts have increased sharply. Fraudulent messages that appear to come from official Meta support are arriving through messages, emails and other channels. Most often, they claim your account will be permanently deleted or blocked, and that you have just 48 hours to verify it in a fake login window created by attackers.

How can you spot phishing?

1. The domain the email was sent from is not one of the following:
   • fb.com
   • facebook.com
   • facebookmail.com
2. It gives you a short time window to take action, followed by the threat of permanent account blocking or deletion. Meta cannot enforce such a short deadline. It would expose them to lawsuits.
3. Professional hackers can fake both an email address and a phone number, a practice known as spoofing. That is why it is also essential to check the login page and make sure it is:
   • www.facebook.com
   • www.instagram.com
   • adsmanager.facebook.com
   • business.facebook.com
   You do not need to check repeatedly if you use a password manager or have passwords saved in your browser. In that case, they will autofill only on the correct domain. If they do not, look more closely at why.

What does a phishing email like this look like?

Notice that the email address does not match the official address of Meta

Prevention matters before it is too late

1. Turn on two-factor authentication IMMEDIATELY if you have not already. Require it from everyone who has access to your company accounts.
2. Use a password manager. Do not reuse the same passwords across multiple accounts.
3. Consider getting Meta verified; see my appeal to people around me who use Facebook and Instagram for business purposes. I have seen several cases close to home where people lost years of work overnight. It is important to understand that you are not the true owner of these accounts. Meta is, and Meta does not have the capacity to resolve 58,000,000 hacked accounts a year, or accounts incorrectly flagged and blocked by its system.

   

4. Also consider moving your content into the blog section of a website that is fully under your ownership.

What should you do if you fall victim to phishing on Facebook?

If you accidentally entered your username or password on a website you reached through a suspicious link, someone else may be able to log in to your account. You can respond in several ways:

1. If you can log in to your account, find out how to secure it by setting a new password and logging out of all devices that are not yours.
2. If you cannot log in to the account and your username or password does not work, find out how to recover the account.
3. If you want to check whether anything unusual is happening with your account, read how to review recent activity and go through the latest emails sent by Facebook.
4. If you use the same password for Facebook and your email, change it immediately! If you use the login details handed over to attackers on other well-known platforms such as Netflix, Binance and others, you will need to change your passwords there too.

Thank you for your attention, and please share 👉 Awareness matters. Tricks and techniques keep improving, and they can confuse more than a few people.

Bc. Petr Kučera, MSc., MBA
CEO & Performance Strategist

If you liked it share it