Fake Antivirus Scams on Facebook
Scammers run fake security ads and pages on Facebook warning of infections, pushing users to download bogus 'antivirus' tools or pay for fake protection.
Part of: Fake Antivirus Scams
Last reviewed: 1 June 2026
On Facebook a fake antivirus scheme can reach you through a slick sponsored ad, a 'security tips' page, or a Messenger warning that your device is compromised. The platform's advertising reach lets the offer look like a legitimate product promotion.
Genuine security software is not pushed through Facebook ads claiming to have detected a problem on your device. Scammers exploit the platform's targeting and page tools to spread alarming warnings and steer users toward a malicious download or a payment for protection that does nothing.
How this scam works on Facebook
You see an ad or post warning that devices like yours are 'at risk', or a Messenger message claiming an infection was detected. Clicking through leads to a download or a payment page for 'protection'.
The downloaded app is malware masquerading as antivirus, or the payment buys nothing real. Some versions install software that floods you with fake threat alerts to drive further 'upgrade' purchases.
The professional look of the ad and the urgency of the warning combine to prompt installation before the user pauses to verify the source.
Common red flags
- A Facebook ad or page warns your device is at risk and offers a fix
- A Messenger message claims an infection was detected on your device
- You are directed to download antivirus from a link rather than an app store
- You must pay for 'protection' promoted in the ad
- The app floods you with threat alerts after installation
- The page or advertiser is unverified or newly created
How to protect yourself
- Ignore Facebook ads and messages claiming to detect problems on your device
- Install security software only from official app stores or vendor sites
- Do not pay for protection promoted through social-media ads
- Be sceptical of 'security' pages that contact you first
- Use reputable, self-chosen security tools
- Report the ad or page and block the account within Facebook
How to report it
- Use Facebook's 'Report' tool on the ad, page, or Messenger chat
- Report a malicious app to the official app store where relevant
- File a report with your national fraud or cybercrime reporting centre
Frequently asked questions
Can a Facebook ad know my device is infected?
No. An ad cannot scan your device — it simply claims a problem to scare you into downloading malware or paying for fake protection. Install security software only from official app stores or the vendor's website.