Threat Intelligence Directory
Phishing

Facebook / Instagram Account Phishing

Attack Trigger

Account suspension or copyright violation notice forces immediate login

What Attackers Want

Social media credentials / linked payment method / account takeover

How This Attack Works

Attackers send emails or DMs impersonating Meta claiming your Facebook or Instagram account has been flagged for a policy violation, copyright infringement, or suspicious login. A link leads to a convincing fake login page that steals your credentials and linked payment methods.

Red Flags to Watch For

  • Sender is not from @meta.com, @facebook.com, or @instagram.com
  • Login link does not go to facebook.com or instagram.com
  • Email threatens permanent account deletion within 24–48 hours
  • Requests your password to "appeal" the violation
  • Copyright claim references content you do not recognize
  • Page asks for your two-factor authentication code

Known Malicious Domains

These domains have been associated with this attack. Never click links going to these addresses.

  • facebook-account-verify.comMALICIOUS
  • instagram-security-alert.netMALICIOUS
  • meta-login-confirm.comMALICIOUS
  • fb-account-suspended.netMALICIOUS

Glance automatically blocks emails from domains on this list. Domain list is not exhaustive — attackers register new domains continuously.

How Glance Stops This

  • Domain similarity analysis catches lookalike sender addresses at millisecond speed
  • SPF / DKIM / DMARC validation flags authentication failures before you ever see the email
  • VirusTotal + Google Safe Browsing checks every link in real time
  • Urgency language detection scores the email higher for manual review
  • Known malicious domain blocklist updated continuously from live scan data

Don't wait to get hit.

Glance scans every incoming email against 12 detection layers — including the exact tactics described above — before it reaches your inbox.

Protect My Inbox — Free