Spotting fake Meta messages and emails: "Your Page violated copyright"

"Your Page has violated copyright and will be disabled within 24 hours. Please appeal using the link below." If you manage a Facebook Page, you've probably seen a message like this. It is one of the most common account-takeover scams aimed at Page owners and advertisers.

How the scam works

Security firms such as Check Point have documented campaigns imitating Facebook copyright notices, in which scammers:

• Send emails, Messenger messages or comments using Meta-like names and logos ("Meta Support", "Page Policy", "Meta Infringement").
• Claim your Page violated copyright or Community Standards and will be removed very soon.
• Link to a site imitating Meta's help or appeal pages.
• Ask for your email, password, two-factor code, sometimes your birthday or ID.

Once you submit, they log into your real account, change the password, take your Page and may use your ad account.

Six warning signs

1. Urgency: "within 24 hours", "final warning".
2. Sender is a Page or personal profile named like "Meta Support" with a Meta logo. Meta doesn't contact you about violations from random Pages.
3. The link isn't on a Meta domain, or uses a link shortener, form builder or look-alike domain.
4. It asks for your password or login code. Meta never asks for your password by message.
5. Typos and machine-translated wording.
6. Email from an unfamiliar address outside Meta's official domains.

Check whether an email really came from Meta

According to Facebook's help page, Facebook/Meta emails only come from these domains or their subdomains:

• fb.com, facebook.com, facebookmail.com
• instagram.com
• meta.com, metamail.com, global.metamail.com

The surest check is inside your account: Settings & privacy → Settings → Accounts Center → Password and security → Recent emails (or open facebook.com/recent_emails/security). It lists security emails Meta sent over roughly the past year. If the message isn't there, it's fake.

Real violation notices appear in your Support Inbox or Account Quality inside Facebook. You never need an outside link.

Simple rule: never log in through a link in a message. Open the Facebook app yourself or type facebook.com.

Clicked and entered your details?

Act right away:

1. Change your Facebook password (and your email password if it's the same).
2. Log out of unknown devices in Accounts Center → Password and security → Where you're logged in.
3. Turn on or reset two-factor authentication, ideally with an authenticator app or security key.
4. Review admins on your Page, Business Manager and ad accounts, and remove strangers.
5. If you've lost access, go to facebook.com/hacked on a familiar device.
6. Report the fake message or Page.

Other common variations

• "Your account will be locked unless you verify", with a link.
• "You qualify for a free blue badge."
• Someone claiming to be "Meta staff" calls or adds you, offers help and asks for a one-time code.
• An "evidence of violation" attachment that is an archive or installer and may contain malware.

How AT Media can help

If you own the Page or account and entered your details on a fake site, AT Media can help you contain the damage, review admin access and follow Meta's official recovery process. We also run 1-1 sessions so you can spot these scams yourself. Your information stays private.