Angela’s stomach dropped as she scrolled through her Messenger chat. A message from Meta threatened to close her Facebook account, citing unusual activity and even harassment. The warning was convincing, using Meta’s logo and language that seemed official. But Angela’s cyber instincts kicked in, and she reported the suspicious message to Kurt “CyberGuy” Knutsson, a cybersecurity expert.
It turns out Angela’s instincts were spot on. The message was a phishing scam, designed to trick users into revealing their login credentials. Scammers have been using artificial intelligence to create convincing fake websites, impersonating trusted brands like T-Mobile to defraud hundreds of thousands of Americans, causing millions in losses, according to Halimah Delaine Prado, Google’s general counsel.
The Meta Verified scam is a masterclass in fear-tactics. Scammers use a mix of official-sounding language, a well-designed fake website, and a sense of urgency to get victims to act fast. But the message is riddled with red flags, from the misspelled account name to the vague accusations of hacking and impersonation.
One of the biggest red flags is the PDF attachment, labeled “Facebook Account Support Center.pdf.” The name sounds official, but it’s actually a phishing link, designed to push victims toward a scam website or lead them to download malicious software. Angela’s decision to report the message to CyberGuy Knutsson saved her from potentially falling victim to this scam.
CyberGuy Knutsson warns that scammers are getting increasingly sophisticated, using AI to create convincing fake websites and messages. He advises users to be cautious when receiving messages that seem urgent or official, and to always verify the authenticity of the message before taking any action.
Real account problems should still be handled carefully, and a legitimate warning does not require you to trust a random attachment inside Messenger. If you receive a suspicious message, do not open the attachment, and do not enter any passwords or security codes. Instead, open Facebook yourself through the app or by typing the address into your browser, and check your account status, notifications, or support inbox from inside your account.
The Meta Verified scam is a reminder that cybersecurity is a constant battle, and users must stay vigilant to avoid falling victim to these sophisticated scams. As CyberGuy Knutsson advises, “Never trust a message that seems too good (or bad) to be true, and always verify the authenticity of the message before taking any action.”
In the coming weeks, CyberGuy Knutsson will be hosting a free live class on how to cut down on robocalls, spam texts, junk email, and other unwanted messages. The class will take place on Wednesday, July 22, at 1 p.m. ET, and will provide users with simple ways to filter spam, clean up their inbox, and recognize the messages that could put their personal information at risk. To reserve your free spot, visit CyberGuyLive.com.
