Several messages promising to protect your privacy or prevent platform penalties have gone viral again on Facebook and Instagram , but they are actually scams. Among them is the well-known warning about a "new rule" that supposedly allows Facebook to use your photos if you don't post text on your profile.
The company itself has confirmed to fact-checking organizations that the text is fake and has no legal or technical effect. Meanwhile, phishing campaigns are circulating that mimic notifications from "Meta's AI" with the hook that "your account will be suspended," redirecting users to fraudulent websites to steal credentials.
What fake messages are circulating now?
The hoax about the supposed "new rule" resurfaces periodically with slight variations: users are encouraged to copy and paste a declaration to prevent Facebook or Meta from using their data. This is invalid , it does not modify the terms of service, and the tech company has reiterated that it is a scam that has been circulating for years.
Also proliferating are lures like "you appear in this video or photo ," designed to pique your curiosity and get you to click on a link. Once you click, you're asked to log in or download files , with the aim of stealing your password or installing malware through social engineering.
Another common tactic is promising prizes or raffles supposedly linked to your activity on the social network. These are hooks to get you to hand over personal or banking information . If you haven't signed up for anything, always be suspicious.
Fake "AI verification by Meta" alerts are gaining ground , claiming your account violates rules and will be blocked if you don't act immediately. They link to sites that mimic the company's visual identity but use strange domains (for example, variations like "bossfixshing2025.site"), where they ask for your username and password . There's no real verification; it's phishing.
False security alerts use urgency (“last warning,” “in 24 hours,” etc.) to prevent you from checking the link or the sender . If they ask for information outside of official channels, it’s almost certain they intend to take over your account.
How to detect and avoid Facebook scams
There are signs that are repeated in almost all of these scams and that will help you identify the risk even without advanced technical knowledge:
- Threats of suspension or elimination within very short periods of time.
- Spelling mistakes, unnatural writing, or messages generic.
- Shortened links or domains that do not match the official ones.
- Credential Requests outside the app itself or the Facebook site.
- Absence of HTTPS (padlock) or addresses with suspicious variations.
Before clicking, always check within your account : in Settings and Privacy you can check "Recent emails from Meta," where legitimate communications appear. If a notification isn't there, be suspicious.
If you've already entered your password on a suspicious website , act immediately : change your password, log out of all devices, and enable two-step verification. If you still can't access your account, go to the Help Center and follow the account recovery process.
Strengthen long-term protection with strong, unique passwords, two-step verification, and regular review of "Apps and websites" connected to your profile to revoke access you don't need.
Maintaining basic cybersecurity habits and being wary of anything that seems too urgent or flashy is the best defense. Hoax and phishing campaigns change form , but they share patterns that you can detect with calm and common sense.
The current situation combines recycled hoaxes and more sophisticated frauds masquerading as official warnings: knowing how they operate, always validating the source, and applying security measures to your account will allow you to minimize risk and regain control if something goes wrong.
