Buzz
Copyright infringement is a significant issue, and most social media platforms take strict actions to prevent it. For example, if you upload a copyrighted video or song on YouTube, all it takes is a quick report from the owner, and your content will be promptly removed.
Unfortunately, not all copyrighted content is protected. People tend to take copyright infringement seriously due to related laws. That's why scammers have exploited this to create fake copyright violation warnings, aiming to deceive users into providing their information. If you receive such warnings on Facebook, be careful because the culprits behind them will try to steal your password and two-factor authentication code from you.
- Reference: How to enable two-factor security on Facebook
- Reference: Facebook two-factor authentication guide
Legal trouble or a fake warning?
According to Sophos Labs, a new scam is spreading on Facebook using fake copyright violation warnings to trick people into sharing their passwords, phone numbers, and 2FA codes. It's a well-planned scheme; when you click on the link, you'll be directed to a login page and an email that looks very authentic. However, upon closer inspection, you'll see it's all fake.
Here's how this scam works: Scammers contact you via email, claiming that the content you posted on Facebook has violated copyright, alongside a threatening message to deactivate your account if you don't comply.
If you click on the Continue link in the email, you'll be redirected to a page similar to Facebook but associated with scammers. This page will have a link leading to a complaint form that looks like another Facebook link.
But unlike the first page, this page doesn't exist on Facebook at all. Instead, you'll be taken to a scam website, asking you to provide information like your name, phone number, and Facebook password. You'll be asked to enter this information twice for confirmation.
The website will ask you to enter a code that you'll receive via text message to confirm the complaint. That's your 2FA code. Yes, the scammers are trying to bypass your account's security measures.
This is a serious scam campaign with more sophisticated tactics than usual. Because copyright complaints are something people often face. Therefore, many people online can easily fall prey to this trick. But now that you know the truth, you can spot the scam before it has a chance to deceive you.
What to do when you receive a copyright violation warning? What will happen if you take the bait?
Sophos Labs has some advice for Facebook users concerned about this scam. If you follow these steps, your account will be much safer:
- Check the sender's email: This is one of the easiest signs to detect fraudulent behavior. Simply look at the sender's email address and compare it to Facebook. In the example above, the email sender is not at all Facebook.com.
- Check the address bar: Just like with the sender field, your address bar can also tell you whether you're accessing a phishing website or not. If the website looks like Facebook but the address bar doesn't match, exit as soon as possible.
- Forward phishing emails on Facebook to [email protected]: This is to report scams, and Facebook will investigate the domain to take preventive measures.
- Never click on links in emails you receive: Be wary of any suspicious links in emails, even if the sender is someone you know. If you click on a link from an email and you're taken to a page asking for login information, that's 100% a sign of phishing.
Because this scam can bypass Facebook's two-factor authentication, the best way to stay safe is prevention. If you've fallen for it, change your Facebook password immediately:
- Check now: How to change your Facebook password
- On Facebook web, click on the account button located in the top right corner of the screen.
- Choose Settings > Settings & Privacy.
- Click on Security and Login.
- Click Edit next to Change password.
- Enter your current password and new password.
- Click Save Changes.
Scammers are increasingly better at disguising themselves and have more sophisticated tactics, meaning we all need to be extremely careful when checking emails. A small mistake can lead to loss of money, stolen data, and compromised accounts. If you don't want to see your Facebook page being sold on the Dark Web, be vigilant. In case Facebook has unfortunately been hacked, you need to take some important steps.
- Learn more: Immediate actions to take when your Facebook is hacked
- Learn more: How to recover a hacked Facebook with lost password and email
