You check your phone and there’s a message saying someone requested a password reset for your Facebook account. Then another message shows up asking you to click a link before your account gets locked.
A Facebook password reset scam is a trick that makes people believe they need to reset their password immediately. The message looks official. Sometimes it copies Facebook’s logo. Sometimes it arrives through email. Other times it lands in Messenger or as a text.
How the scam actually works
Someone claims there was a login attempt from another device. Or they say your account will be disabled if you don’t verify it within a few minutes.
The link usually opens a page that looks almost identical to Facebook. You enter your email. Then your password. Sometimes you’re even asked for the security code sent to your phone.
The fake login page
They often sign in to your real account within minutes. If they get access, they may change your password before you even realize what’s happening.
• A message that creates panic instead of giving you time to think.
• Strange links with extra words or odd spellings usually deserve a second look.
• The request for your one time security code. Facebook won’t ask for it through a random message, and that’s where people get caught.
• Poor grammar isn’t always there. Some fake pages look surprisingly polished, which honestly makes them more dangerous.
Why people still fall for it
Most victims aren’t careless. They’re busy. Someone checks a notification while standing in line for coffee or waiting for a meeting to start.
Raj almost fell for one while ordering lunch at work. He noticed the web address looked slightly different because he paused to finish paying first.
What you should do instead
Never use the link inside a message claiming your password needs to be reset. Open Facebook yourself through the app or type the address into your browser. If there’s a real security issue, you’ll see it after signing in the normal way.
A better habit
Turn on two factor authentication if you haven’t already. It adds another step before anyone gets into your account. Yes, it takes a few extra seconds.
And if you accidentally entered your password on a fake page, don’t wait around hoping nothing happens. Change your Facebook password immediately. Then review your recent login activity.