Fake Meta/Facebook Copyright Strike Takedown Phishing
Phishing messages claim a Facebook Page or business account has received a copyright strike and will be deleted unless the owner appeals through a link that leads to a credential-harvesting page.
Part of: Copyright Strike & Takedown Phishing
Last reviewed: 7 June 2026
Facebook Pages and business accounts are subject to Meta's intellectual property enforcement policies, including the removal of content for copyright violations under the DMCA. Page owners and business managers who depend on their Facebook presence for customer acquisition and revenue take these notices seriously — which makes them ideal targets for fake copyright strike phishing.
The fake strike is particularly effective because it creates a double threat: the loss of the specific content and the potential loss of the entire Page or account for repeat violations. For small businesses, this represents a direct commercial risk that can override careful verification habits.
Unlike phishing that targets ordinary consumers, copyright strike phishing is often aimed at businesses and creators with established followings, because the value of those accounts is higher and the motivation to protect them is stronger.
How this scam works on the Meta/Facebook brand
Meta's real intellectual property enforcement notifications arrive from @facebookmail.com and direct Page owners to business.facebook.com or to the in-app Support Inbox. When a specific post is removed for copyright, the Page administrator sees a notification in their Facebook Page inbox. Appeals are handled through the in-app process or through the official counter-notification form at facebook.com/help/ip/counter-notice.
Fake copyright strikes replicate the visual design of Meta's policy enforcement emails. They reference the recipient's Page name — obtained from the public Page — and include a fabricated violation description with a plausible-sounding copyright holder name. An 'Appeal the Decision' button links to a domain such as meta-copyright-appeals[.]com.
The fake appeal page requests the Page administrator's Facebook login credentials and in some cases their business email address and password. Attackers use these credentials to immediately access the Facebook business account and lock out the legitimate owner.
Common red flags
- Copyright strike email sender is not from @facebookmail.com or @metamail.com
- No corresponding notification appears in the Facebook Page Support Inbox or in-app notifications
- The appeal link leads to a domain other than business.facebook.com or facebook.com
- The copyright holder name cited in the notice is vague, generic, or does not match any content on the Page
- The notice threatens immediate Page deletion for a first copyright strike — Meta applies graduated enforcement
- You are asked to re-enter your Facebook password through the email link to file the appeal
How to protect yourself
- Check your Facebook Page Support Inbox directly at business.facebook.com for real enforcement actions
- Access all Meta copyright appeal processes through facebook.com/help/ip/counter-notice, not via email links
- Enable two-factor authentication on the Facebook account with administrator access to the Page
- Limit Page administrator access to only the people who genuinely need it
- Report fake copyright enforcement emails to [email protected]
How to report it
- Forward the phishing email to [email protected]
- Report the fake domain to Google Safe Browsing at safebrowsing.google.com/safebrowsing/report_phish
- Report to the FTC at reportfraud.ftc.gov (US) or Action Fraud actionfraud.police.uk (UK)
- If your Page was accessed, use facebook.com/hacked to begin account recovery
Frequently asked questions
How does Facebook handle a real copyright violation?
When Meta receives a valid DMCA takedown request, it removes the specific infringing content and sends a notification to the Page administrator through the Facebook Support Inbox. The administrator can view the details and file a counter-notification within the same in-app system — no external sign-in is required.
Can a single copyright violation cause my Facebook Page to be deleted?
A single copyright takedown normally results in removal of the specific piece of content. Meta's policy involves multiple strikes before a Page is disabled for repeat infringement. Notices threatening immediate Page deletion for a first strike are a common exaggeration tactic used in phishing.
I clicked the appeal link and entered my credentials. What should I do?
Change your Facebook password immediately at facebook.com/settings?tab=security. Review and revoke access for any unrecognised apps at facebook.com/settings?tab=applications. Check that your recovery email and phone number have not been changed. Report the incident via the Facebook Help Center.