Said the Gramophone - image by Kit Malo

Searching for phishing scams involving Facebook often highlights deceptive links that mimic official domains to steal login credentials or personal information. Common tactics include messages about account violations, "important notifications," or fake friend requests designed to lead users to fraudulent landing pages. Key Red Flags and Prevention Protect yourself from phishing on Facebook

This paper examines a phishing campaign leveraging Facebook as a distribution channel and the domain home.com (or a typosquatted variant) as a lure. It analyzes how attackers abuse Facebook’s messaging, groups, or ads to direct users to fake login pages, harvest credentials, and evade detection. The study includes a technical breakdown of the phishing kit, social engineering tactics, and recommendations for platforms and users.

Scammers may impersonate housing authorities or real estate portals to post fake rental listings or housing assistance programs. For example, they might claim a waitlist for Section 8 vouchers or a special home-buying grant is open, providing a link to a fraudulent site. Common Phishing Tactics

Scammers use Facebook posts, ads, or direct Messenger chats to reach millions of users. They often create fake profiles that look like official company pages to post "alerts" or "deals".