Social Media Account Ransom Scam on Facebook
How scammers who compromise or convincingly claim to control a Facebook account or Page demand payment to return access, threatening deletion or exposure otherwise.
Part of: Social Media Account Ransom Scam
Last reviewed: 13 July 2026
Facebook accounts and business Pages are frequent targets for account ransom scams because losing access can mean losing years of photos, a customer base, ad accounts, or an entire small business's online presence. A scammer who gains access — through a phishing link, a fake copyright/verification prompt, or a leaked password — locks the real owner out by changing the password, email, and two-factor settings, then contacts the victim demanding payment to restore access.
Some variants do not involve any actual hack at all: the scammer merely claims to have compromised the account or Page and threatens to delete it or misuse it unless paid, relying on the owner's fear of losing the account without ever actually possessing real access. Because Facebook Pages are often tied directly to a business's income through ads, messaging, and customer reviews, the pressure to pay quickly rather than go through Facebook's official recovery process can be intense.
How this scam works on Facebook
Access is typically obtained through a phishing message impersonating a Facebook copyright, verification, or policy-violation notice, tricking the victim into entering their login credentials on a fake page. Once inside, the scammer changes the account password, recovery email, and phone number, locking the legitimate owner out entirely, and may also remove other admins from a business Page.
The scammer then contacts the victim — sometimes through a new fake account, sometimes via the victim's own hacked account messaging their friends or Page followers — demanding a payment, often via cryptocurrency or a payment app, to restore access, and threatening to delete the account, sell it, or post damaging content if payment is not made by a deadline.
Because Facebook's official account recovery process (using government ID verification, trusted contacts, or recovery codes) does not involve any payment, any message demanding money to 'unlock' or 'return' an account is being sent by the scammer rather than by Facebook itself, regardless of how official the messaging appears.
Common red flags
- You are suddenly locked out of your Facebook account or Page and cannot recover it through normal login steps
- A message — from an unfamiliar account or your own hacked account — demands payment to restore access
- The message threatens to delete your account, sell it, or post damaging content unless you pay by a deadline
- You recently clicked a link in a message claiming to be about copyright, verification, or a policy violation before losing access
- Payment is requested via cryptocurrency or a payment app rather than through any official Facebook channel
- Friends or followers report receiving strange messages or posts from your account around the time you lost access
How to protect yourself
- Do not pay — Facebook's official account recovery process never requires payment to restore access
- Use Facebook's official Hacked Account recovery tool (facebook.com/hacked) to begin reclaiming your account immediately
- Warn your friends, followers, or Page audience through another channel that your account may be compromised and sending suspicious messages
- Change passwords on any other accounts that reused the same password, and enable two-factor authentication once you regain access
- Report the incident and any imposter or ransom-demanding account to Facebook directly
- For business Pages, contact Meta Business Support for dedicated recovery assistance given the potential impact on advertising and customer access
How to report it
- Use Facebook's official recovery tool at facebook.com/hacked to report and begin reclaiming a compromised account
- Report the ransom-demanding account or message directly within Facebook's reporting tools
- File a report with your national cybercrime authority (e.g., IC3, Action Fraud, or ACSC)
- For business Pages, contact Meta Business Help Center for dedicated support
Frequently asked questions
Will paying the ransom actually get my account back?
There is no guarantee. Facebook's real recovery tools do not involve payment at all, and scammers who successfully lock an account often do not restore it even after receiving payment, since there's no enforcement mechanism holding them to their word.
How do I recover my account without paying?
Go to facebook.com/hacked and follow Facebook's official recovery steps, which typically involve identity verification, trusted contacts, or recovery codes tied to your original account details. This is the only reliable path to regaining access.
What if the scammer is now messaging my friends from my account?
Warn your friends and followers through another channel (text, a different platform, or in person) that your account is compromised and that any messages or links from it should not be trusted, while you work through Facebook's recovery process.
I run a business Page — can I get faster help?
Yes, Meta offers a dedicated Business Help Center for Pages tied to advertising accounts, which can sometimes expedite recovery given the business impact. Document your ad account and Page admin history to support your case.
If I already paid, can I get a refund?
It depends on the payment method — cryptocurrency payments are generally irreversible, while a payment app or card transaction may be disputable. Recovery may depend on the payment method and timing, so contact your payment provider directly and report the incident regardless of the outcome.