Recently, we’ve received an email claiming that our Facebook page has violated one of more of Facebook Page’s terms. Without providing much information on the actual “violation”, the email directs you to a Facebook URL where you can supposedly file an appeal.



As shown above, the email was sent from a different domain name although it is signed off as “Facebook Support”. If you click on the link, it goes to a Facebook page which carries the same message. For the initiated, this looks legit but this is actually a Facebook “Notes” page which anyone can create from a Facebook page.



What’s scary is that they can disguise a URL which links to another location. As shown below, the supposed link to file an appeal, actually links to a bit.ly URL instead of an official Facebook page.



If you click through, it lands on a different website that pretends to be a Facebook page. The page which has a typical Facebook Help Centre interface shows an “Appeal Page Policy Violation” form which will requires you to provide your email address, page URL and your password.

Phishing emails still have a worryingly high hit rate. Research from 2020 found that 91% of all cyber attacks begin with a phishing email to an unsuspecting victim.