Online Threat Alerts (OTA) - Alerting you to scams and frauds.

Is facebookmail.com a Scam?
Is facebookmail.com a Scam?

Facebookmail.com is a legitimate domain owned and used by Facebook (Meta) to send official notifications. While the domain itself is real, you must remain cautious because scammers can "spoof" (fake) the sender address to make a fraudulent email appear as though it came from this trusted source.

Verify the Email

The safest way to confirm if an email from this domain is genuine is through your Facebook account settings:

  1. Check "Recent Emails": Log in to Facebook and go to Settings & privacy > Settings > Accounts Centre > Password and security > Recent emails.
    • Any official security or notification email Facebook sent you in the last year will be listed there.
    • If it’s not in this list, the email is a scam.
  2. Inspect the Links: Hover your mouse over any buttons or links (without clicking) to see the actual URL. It should lead to facebook.com or facebookmail.com.
  3. Look for Personalization: Official emails usually address you by your real name rather than generic greetings like "Dear User".

Signs of a Scam

Even if the sender says security@facebookmail.com, it is likely a scam if:

  • It creates fake urgency: Phrases like "your account will be deleted in 24 hours" are common tactics to make you panic.
  • It asks for sensitive info: Facebook will never ask for your password, credit card number, or 2FA codes via email.
  • It contains attachments: Official notifications rarely include files like .zip or .pdf.
  • It has poor grammar: Frequent typos or strange phrasing are major red flags.

If You're Unsure

  • Do not click any links or download any attachments in the email.
  • Report it: You can forward suspicious emails to phish@facebook.com to help Meta take action.
  • Go direct: If you're worried about your account, go directly to facebook.com or use the official mobile app to check your notifications.
waiting