The Facebook Account Recovery scam involves a fraudulent email that pretends to be from Facebook's support team. The email subject typically includes a recovery code, and the message claims that a password reset request has been made for the recipient's Facebook account. The scam aims to deceive users into thinking their account security is at risk and prompts them to enter the provided recovery code.
If you received a Facebook password reset email that you didn't request, it's likely that someone accidentally entered your email or username when attempting to log into their account. This often happens if you have a popular username or email. As long as you don't click the link to reset your password, no action will be taken and your account will remain secure.
If you think someone is entering your username by mistake, you can turn off password resets for your username. To do this, click the "let us know" link in your email and follow the onscreen instructions.
If you receive a second email saying that your password was reset, you should immediately secure your account.