Copyright Strike Takedown Phishing on Facebook
Phishing messages impersonating Facebook's rights management team or rights holders' representatives threaten page administrators with removal for copyright infringement, directing them to fake appeal portals that capture credentials or payment.
Part of: Copyright Strike & Takedown Phishing
Last reviewed: 1 June 2026
Facebook page administrators are common targets for fake copyright takedown notices because they have significant vested interest in their pages — communities, business contacts, and advertising revenue — that makes them willing to act quickly to avoid page removal.
The threat of copyright action is particularly effective against pages that regularly share news, entertainment, or third-party content, where the plausibility of a genuine copyright claim is higher.
How this scam works on Facebook
A message arrives via Facebook Messenger or email from an account impersonating Facebook's intellectual property team or a named rights-management company, claiming that a specific post or video on the page infringes copyright. A 24 to 48 hour deadline is given before the page is taken down, and a link is provided to dispute the claim.
The dispute link leads to a convincing fake Facebook interface requesting the administrator's login credentials 'to verify page ownership'. Once entered, the attacker accesses the page, removes the administrator's access, and uses the page for further scams or fraudulent advertising.
In fee-based variants, the message offers a 'paid settlement' option to resolve the claim quickly, directing the administrator to a payment portal that collects card details or bank information.
Common red flags
- Copyright warning message arriving in Messenger from an account that is not verified or recognisable
- Dispute link directing to a URL that is not facebook.com or meta.com
- Very short deadline — 24 to 72 hours — before page removal
- Request to enter your page administrator password as part of the dispute process
- Paid settlement option for a copyright claim presented via message rather than through Facebook's Rights Manager
- Rights holder or law firm name that cannot be independently verified
How to protect yourself
- Log in directly to Facebook and check Pages > Publishing Tools > Rights Manager for any genuine copyright actions on your page
- Navigate to Meta Business Suite directly to review any business or page policy notices
- Never enter your password on a site reached by clicking a link in a copyright warning message
- Add a secondary administrator to your page so that even if your account is compromised, the page remains recoverable
- Enable two-factor authentication on your Facebook administrator account
- Respond to any genuine copyright claim only through Facebook's official Rights Manager dispute process
How to report it
- Report the phishing Messenger message using the in-app report function
- Forward the phishing email to [email protected] for investigation
- File a report with your national cybercrime unit if credentials were entered and the page was compromised
Frequently asked questions
How does Facebook handle real copyright complaints against pages?
Genuine copyright actions are communicated through Facebook's Rights Manager tool, accessible in Page settings. Page administrators also receive official notifications in their Support Inbox. Real copyright actions never require settlement payment via message and do not involve external login portals.