TL;DR: A new SMS phishing scam sends an all-caps FINAL WARNING text claiming foreign hackers are attacking your Facebook profile and that Meta will permanently disable it unless you reply right away. It is designed to create panic so you respond before thinking. Do not reply; check your account only through the official app.
Sierra Wave reported on September 18, 2026 that a text message scam is targeting social media users with aggressive intimidation. The message claims foreign hackers are attacking your profile and threatens that your account will be permanently disabled unless you respond immediately.
How the scam works
- Artificial urgency. All-caps wording and a tight deadline are meant to stop you from stopping to think.
- A reply, not a link. Asking you to reply is a way to confirm your number is active and to start a conversation where the scammer can steer you to a fake login page or a code request.
- Impersonated authority. Meta does not manage your account through threatening text messages from random numbers.
What to do if you got the text
- Do not reply and do not tap links. Delete or report the message as spam or junk using your phone's reporting option.
- Open the Facebook app directly and check Security and login settings. If nothing looks wrong, nothing is wrong.
- Never share a login code that arrives by text. Codes sent to you are for you only.
- Turn on two-factor authentication and review logged-in devices. Our two-factor authentication guide walks through it.
If you already replied or clicked
Change your Facebook password and email password immediately, log out of all sessions, and follow our Facebook account hacked recovery steps. If you gave out a code, treat the account as compromised.
Phone-number targeting like this is common. See how SIM swap fraud works for why your number is worth protecting, and the fake ChatGPT billing email for a similar urgency trick by email. If a scammer threatens to share your images, read the 48-hour takedown rule.
FAQs
Is the FINAL WARNING Facebook text real?
No. It is an SMS phishing scam that uses panic and a deadline to make you reply or click. Meta does not threaten to disable accounts by random text.
What happens if I reply to a scam text?
Replying confirms your number is active and can lead to more messages or attempts to get you onto a fake login page. Do not reply; report and delete.
How do I check whether my Facebook account is really at risk?
Open the app yourself and review Security and login. Never use a link or number from the text.
Want to know how exposed you are right now? Run the free digital footprint checker.
Curious what's already out there? Scan My Shadow checks a phone number and email across 1,500+ sources and sends a clear report — no guesswork, just facts. Start your scan.