We have seen evidence of malicious actors sending Business Manager partner requests that include phishing links. As we investigate this issue, we encourage you to exercise caution as these notifications come from a legitimate Meta domain (facebookmail.com). If you don’t know the person or business mentioned in the partner request, do not click on any links.
Here are a few things you can do to keep your account secure.
Protect your password
- Avoid reusing the same password across multiple websites or apps. Don't use your Facebook password anywhere else online, and never share it with other people.
- Your password should be hard to guess, so don't include your name or common words. Use unique, strong passwords or passphrases, for all of your accounts.
- Learn more about creating a strong password.
Set up two-factor authentication and other security options
Never share your login information
- Scammers may create fake websites that look like Facebook and ask you to log in with your email and password.
- Always check the website's URL before you enter your login information. When in doubt, type www.facebook.com into your browser to get to Facebook.
- Don't forward emails from Meta to other people, since they may have sensitive information about your account.
- Learn more about how to protect yourself from phishing.
Don't accept friend requests from people you don't know
- Scammers may create fake accounts to friend people on Facebook.
- Becoming friends with scammers on Facebook might allow them to spam your timeline, tag you in posts and send you malicious messages.
Never click suspicious links, even if they appear to come from a friend or a company you know
- This includes links on Facebook (example: on posts), in emails or texts.
- Keep in mind that Meta will never ask you for your password in an email.
- If you suspect that a link on Facebook is suspicious, report it.
Watch out for malicious software
Log out of Facebook when you use a computer you share with other people