Is a message saying my Facebook or Instagram account will be disabled a scam?
Almost certainly yes. Account-disabling threats sent by message are phishing attacks designed to steal your social media credentials.
Last reviewed: 1 August 2026
Explanation
Scammers send messages — often appearing to come from 'Meta Support' or a similar-looking account — claiming that your Facebook or Instagram account has violated community standards and will be permanently disabled unless you verify your identity within 24 hours. The link leads to a convincing fake login page that steals your username and password, and sometimes a two-factor authentication code. The attacker then takes over your account to scam your followers or sell the account. Meta communicates real policy actions through the official Support Inbox inside the app — never by DM, external link, or email requesting your password.
Business accounts and creators are hit hardest by this format, because an account that generates income makes the threat of deletion genuinely frightening and the owner correspondingly hasty. Variants aimed at them cite 'copyright strikes' or 'ad account violations' and sometimes arrive via the platform's own advertising or messaging systems, lending false authenticity. The structural tell survives every variation: real enforcement never asks you to prove who you are by typing your password into a page reached from a message. Losing the account to the 'verification' is the outcome the message threatens and the outcome it delivers — the threat and the theft are the same act.
Common red flags
- Message arrives via DM rather than the official in-app support inbox
- Link leads to a domain other than facebook.com or instagram.com
- Urgency — account disabled in 24 hours unless you act
- Asks you to enter your login credentials or a verification code
- Sender account has few followers and recent creation date
What to do now
- Do not click any link in the message
- Check your official Support Inbox in the app for any genuine notices
- Report the message to the platform
- If you entered credentials, change your password and review connected apps immediately
Frequently asked questions
Could the message have come from a hacked account I recognise?
Yes. Scammers use compromised accounts to send phishing links to friends lists. Even if you recognise the sender, treat any login request by DM with suspicion.
I run a business page. Should I treat these warnings differently?
Only by being more careful, not less. Business-targeted versions cite ad or copyright violations to raise the stakes, but the rule is identical: check the official Support Inbox and never enter credentials via a message link.