“Your page will be suspended”: fake social media warnings

How it works

Whoever manages your business’s social media gets a message or email that looks like it comes from the platform’s support or security team. It says the page broke the rules, received a copyright complaint or was reported, and will be suspended or deleted soon. There is a link to appeal.

The link goes to a page that looks like the platform’s login. Entering the password and sign-in code hands the account to the scammer, who removes the business’s admins, takes over the page and uses it for scams or holds it for ransom.

What gives it away

• It arrives as a direct message, comment or email instead of a notice inside the platform’s own account settings.
• There is a short deadline, like 24 or 48 hours.
• The link goes to an address that is not the platform’s own website.
• The sender’s profile is new, odd or uses the platform’s logo without being the official account.

What to do

• Check by going to the platform directly. Real warnings appear in the account’s own notifications or support area.
• Turn on multi-factor authentication for every person with admin access to business pages.
• Keep at least two admins, using company-controlled accounts, so one lost login does not lose the page.
• If you already entered your details, change the password right away and check who has admin access.