There’s a new scam doing the rounds and it is catching business owners off guard because, annoyingly, it looks real.
The scammer sends you a legitimate Meta Business partner request.
That means the notification will come through Facebook or Meta Business Manager, which instantly makes people think:
“Ah, it must be safe. It came from Meta.”
Nope.
This is where the scam gets sneaky.
The partner request itself may be real, but the business behind it is a scammer trying to infiltrate your account or get you to click on something else.
The scammer will add a message designed to panic you. Something like:
“Your account will be locked in 24 hours.”
Or:
“Urgent appeal required.”
Or:
“Click here immediately to avoid restriction.”
Then they include a sketchy link.
And that link is the problem.
Meta has publicly warned that malicious actors have been sending Business Manager and Meta Business Suite partner requests that include phishing links. Meta also states that its representatives will never ask for your password, payment details, or sensitive information over email, chat, text or phone.
So let’s break down what is happening, what to look for, and what to do if one lands in your inbox.
Why This Scam Works So Well
Most dodgy emails are fairly easy to spot.
Terrible grammar. Weird logos. Strange email addresses. Links that look like they were built by someone typing with oven mitts.
But this one is different because it hides inside a Meta Business partner request.
If you run Facebook ads, have an agency, work with contractors, or give access to team members, partner requests are normal.
That’s why this scam is dangerous.
The scammer is not relying on you being silly.
They are relying on you being busy.
Busy business owners see “account will be locked in 24 hours” and immediately go into panic mode. And panic makes smart people click stupid links.
No judgement. That is literally the entire strategy.
What The Scam Looks Like
Based on the one I’ve seen, the email includes:
• Meta for Business branding
• A warning-style message
• Language designed to create urgency
• A claim that your account will be locked within 24 hours
• A link that is not a real Meta link
• A message that appears to be attached to a Business Manager partner request
Before you click anything, check for these warning signs.
- The message tries to panic you
Anything that says your account will be locked, banned, restricted, deleted, or disabled within 24 hours should make you pause.
Scammers love urgency because it stops you thinking clearly.
Meta can and does send account notifications, but you should always verify them inside your actual Meta Business Suite or Account Quality area. Do not trust a random link just because the message sounds serious.
- The link does not go to a real Meta domain
This is the big one.
Scammers often use links that contain words like:
• support
• appeal
• business
• security
• meta
• media
• page
But the actual domain is wrong.
- It asks for passwords, payment information,or personal details
Meta says they won’t be asking you for that information, so anyone that does, treat it as suspicious.
What To Do Instead Of Clicking The Link
Here is the safe process.
Step 1: Do not click the link in the email
Step 2: Open Meta Business Suite manually
Once you are inside Meta Business Suite, check your business notifications, partner requests, account access and Account Quality.
Step 3: Check who sent the partner request
Ask yourself:
- Do I know this business?
• Was I expecting this request?
• Is this an agency, contractor or partner I trust?
• Does the business name match the person or company I am working with?
• Have they confirmed separately that they sent it?
If the answer is no, reject it.
What To Do If You Already Clicked The Link
First, do not panic.
Secondly, here’s what to do:
• Change your Facebook password immediately
• Turn on two-factor authentication if it is not already on
• Check who has access to your Business Manager and ad accounts
• Remove any unknown users or partners
• Check your payment methods
• Review recent ad account activity
• Report the scam attempt to Meta
• Contact your bank if you see unauthorised charges
If Meta needs you to fix something, you should be able to find it by going directly into your Meta Business Suite, Account Quality or Business Support Home.
Do not let fake urgency override your common sense.
A real security issue can be checked inside your actual Meta account.
A fake one will usually push you toward a dodgy link.
So pause. Check the sender. Check the link. Go directly to Meta. And when in doubt, do not approve the request.
Save yourself a the headache and the expensive mess!
Kerry x
