Fake Customer Support Scams on Facebook
How scammers pose as brand or Facebook support agents in comments and Messenger to harvest account credentials, card details, and remote access from people seeking legitimate help.
Part of: Fake Customer Support Scams
Last reviewed: 1 June 2026
When people post complaints or questions on a brand's Facebook page, or reach out to Facebook about account issues, they are often targeted within minutes by fake 'support agents' — impersonator accounts that reply to their public posts or slide into Messenger with an offer of help. The impersonators mimic real support agents using professional-sounding names and copied brand logos, and the victim — already frustrated and hoping for resolution — can be vulnerable to handing over sensitive information.
This guide covers how fake Facebook customer support scams operate, the platform-specific tricks used to make impersonators appear legitimate, and the settings and habits that protect you.
How this scam works on Facebook
The most common entry point is a victim posting a complaint on a brand's public Facebook page — about a delivery, a billing issue, or an account problem. Within minutes, a fake support account (with a name like 'Facebook Help Centre' or '[Brand] Customer Care') replies to the post or sends a DM offering to resolve the issue.
The fake agent then follows a script designed to collect the victim's account credentials, payment details, or remote access. Common steps include directing the victim to a fake login page, asking them to 'verify' their account by sharing a six-digit code sent to their phone (in reality, a 2FA code for the real account), or convincing them to install remote desktop software ('for screen sharing to diagnose the issue').
Facebook's own support impersonation variant is particularly damaging: scammers target page owners who have received a fake 'your page will be removed' warning. Panicked page admins are guided through steps that hand over admin access to the attacker.
Facebook itself communicates through in-app notifications and email from @facebook.com or @facebookmail.com — not through Messenger accounts or comment replies.
Common red flags
- An account replies to your public post on a brand page offering support — real brand support rarely operates this way
- The 'support agent' moves the conversation to Messenger from a public comment thread
- You are asked to share a code sent to your phone — this is almost always a 2FA code that gives account access
- A link in a Messenger support chat leads to a login page that is not facebook.com or the brand's official domain
- The agent asks you to install any software for 'remote assistance'
- The account sending support messages has a profile created recently and no verifiable connection to the brand
How to protect yourself
- Initiate all Facebook support through the official Help Centre at facebook.com/help — not via comment replies or unsolicited DMs
- Never share one-time codes sent to your phone with anyone claiming to be a support agent
- Enable two-factor authentication on your Facebook account and use an authenticator app
- For brand support, navigate directly to the brand's official website and use the contact method listed there — do not use Facebook contact details found via search ads
- If you manage a Facebook Page, regularly review admin roles and remove unrecognised admins immediately
How to report it
- Report the fake support account: go to the account's profile → three-dot menu → Find Support or Report → Pretending to be someone
- If your account was compromised, use Facebook's Account Compromised flow at facebook.com/hacked
- Report to the FTC at reportfraud.ftc.gov (US), Action Fraud (UK), or your national authority if credentials or money were taken
- Notify the real brand whose name was used, so they can warn their other customers
Frequently asked questions
How can I tell if a Facebook account messaging me is a real brand's support team?
Legitimate brand support on Facebook generally operates through the brand's official, verified Page (look for the blue tick). Even then, real brands rarely initiate support via comment reply. When in doubt, contact the brand directly through their official website rather than through any Messenger or comment-based channel.
A Facebook support agent asked me to confirm a code sent to my phone — should I?
No. This is the most common mechanism for account takeover via fake support scams. The code is your two-factor authentication token. Sharing it with anyone gives them access to your account. Facebook's legitimate support processes do not require you to share codes sent to your phone with an agent.