Facebook 'Fan Page Verification Program' Phishing Scam
Message purporting to be from Facebook Security claims that a new security feature called the "Fan Page Verification Program" is being implemented and that Page owners must click
a link and choose a ten digit security code to complete the process. Recipients are warned that their Page will be suspended permanently if the process is not completed by May 30, 2013.
The message is not from Facebook.
It is a phishing scam designed to trick users into divulging their Facebook login details to Internet criminals.
Dear Facebook User,
You are receiving this message to notify you about the new security feature from Facebook called "Fan Page Verification Program".
After many Fan Pages have been stolen lately leaving us no choice but Deleting them forever, we had to come up with an original solution about the Fan Page's Security.
Luckily, your Fan Page, has a lot of likes and provides High Quality Content, which qualify it for this program.
To complete this process you must choose a 10-digit number (it can be any number) and that number will be assigned as your Security code". This code will be the new passphrase for changing anything important for your Fan Page, like the Admin roles or other important settings.
Please be aware that this process it's open only until 30.05.2013 and it's mandatory to complete it. If you don't, your Fan Page will be suspended permanently since it is not considered safe for the wide audience.
Please visit the link below to complete the process:
According to this message, which purports to be from Facebook Security, Facebook is implementing a new security feature to protect Page owners called the "Fan Page Verification Program. The message claims that, to complete the process and make sure that their Page
is protected by the new system, Page owners must follow a link and choose a ten digit passphrase. But, warns the message, Page owners who fail to complete the process by 30th May 2013, will have their Pages permanently suspended.
However, the message is not from Facebook Security
and the supposed "Fan Page Verification Program"
is nothing more than a criminal ruse designed to steal Facebook account details. Page owners who fall for the scam and click the link will be taken to a bogus "Fan Page Verification Program
" web page and asked to submit Facebook login details as well as the supposed ten digit "Transferring Code":
After completing the form and clicking the "Submit" button, the following confirmation message will be displayed:
Thus, victims will believe that they have successfully completed the procedure
and will happily wait for the "confirmation" email blissfully unaware - at least for a little while - that they have just handed their Facebook Account login details to cybercriminals. Meanwhile, the criminals can use the stolen information to hijack Facebook accounts and Pages and launch further spam and scams campaigns in the names of their victims.
This phishing scam
is a little more sophisticated than others of its ilk but is nevertheless similar in intent to a long running series of "Facebook Security" scams that have plagued Facebook users
for several years. If you receive one of these messages, do not open any links or attachment that the message may contain.
Last updated: May 24, 2013
First published: May 24, 2013
Research: David White, Brett Christensen
By Brett M. Christensen