Is a message saying my Facebook or Instagram account will be disabled a scam?
Almost certainly yes. Account-disabling threats sent by message are phishing attacks designed to steal your social media credentials.
Last reviewed: 1 June 2026
Explanation
Scammers send messages — often appearing to come from 'Meta Support' or a similar-looking account — claiming that your Facebook or Instagram account has violated community standards and will be permanently disabled unless you verify your identity within 24 hours. The link leads to a convincing fake login page that steals your username and password, and sometimes a two-factor authentication code. The attacker then takes over your account to scam your followers or sell the account. Meta communicates real policy actions through the official Support Inbox inside the app — never by DM, external link, or email requesting your password.
Common red flags
- Message arrives via DM rather than the official in-app support inbox
- Link leads to a domain other than facebook.com or instagram.com
- Urgency — account disabled in 24 hours unless you act
- Asks you to enter your login credentials or a verification code
- Sender account has few followers and recent creation date
What to do now
- Do not click any link in the message
- Check your official Support Inbox in the app for any genuine notices
- Report the message to the platform
- If you entered credentials, change your password and review connected apps immediately
Frequently asked questions
Could the message have come from a hacked account I recognise?
Yes. Scammers use compromised accounts to send phishing links to friends lists. Even if you recognise the sender, treat any login request by DM with suspicion.