When you boost a post on Facebook, it gains higher visibility and potentially reaches a wider audience, making it an attractive target for scammers. Here’s why they do it:

1. Exposure to Vulnerable Targets: Boosted posts are generally part of a business’s advertising strategy, indicating a willingness to invest money on the platform. Scammers see this as an opportunity to exploit businesses that may be less familiar with Facebook’s policies and procedures.
2. Data Harvesting: These scammers often aim to collect sensitive information, such as login credentials or payment details. By pretending to notify you of a policy violation, they attempt to trick you into clicking a malicious link that leads to a phishing page designed to steal your information.
3. Fear of Account Suspension: Scammers capitalise on the fear of account suspension or termination. By warning you of a potential violation, they hope you’ll act quickly, without verifying the legitimacy of the message. This urgency can make users more likely to click on the provided link or follow the instructions, compromising their account security.

3. Generic Warnings: Scam messages often use generic language like, “Your account is at risk of suspension due to a policy violation.” Legitimate Facebook notifications typically include specific details about the alleged violation, along with clear steps to resolve it within the platform.
4. Pressure to Act Quickly: Messages that emphasize urgency, such as, “Respond within 24 hours to avoid account suspension,” are often scams. This tactic is intended to make you act without thinking.

What to Do If You Receive Scam Messages

Receiving these messages can be concerning, but you can protect yourself and your account by following these steps:

1. Do Not Click Any Links: Avoid clicking any links in unsolicited messages, as they could lead to phishing sites. Instead, if you’re concerned about a potential issue with your ad, navigate directly to your Facebook Business page and check for any notifications or warnings from within the platform.
2. Report and Block the Sender: You can report scam messages directly to Facebook. On the message, click the options menu (three dots) and select Report. Choose Spam or Scam as the reason, and then block the user to prevent further communication.
3. Enable Two-Factor Authentication (2FA): To enhance security, enable two-factor authentication on your Facebook account. This adds an extra layer of protection by requiring a second form of verification before anyone can access your account.
4. Regularly Review Ad Status: Instead of relying on unsolicited messages, regularly check your Ads Manager on Facebook for any issues or alerts regarding your boosted posts. Facebook will always notify you through your Ads Manager or the official Facebook support channels about policy violations.
5. Educate Your Team: If multiple people manage your Facebook page, ensure they’re aware of these scams. Educate your team about the signs of phishing messages and remind them to verify information directly through Facebook’s platform.