TL;DR: A message from a friend says “Is this you in this video?” or “Look who died,” with a link. Your friend’s account was taken over. The link leads to a fake login page that steals your Facebook password, and then the same message goes to all your friends. Don’t click. If you did and entered your password, change it now, turn on two-factor authentication and warn your friends.
How it works
As described in a Gedling Eye report on one of many waves:
- The message comes from a real friend’s account that criminals already control: “Really! Is this you in this video?” often with your name.
- The link looks like a YouTube or Facebook video.
- It leads to a fake login page saying you must sign in to watch.
- Enter your details and the criminals take your account.
- They send the same message to your friends. Repeat.
There is no video. There never was. It’s a chain letter with a lock pick.
Why it works
Curiosity plus a trusted sender. Nobody can resist a video of themselves, especially one a friend found worth sending with “Really!” It’s the digital version of someone pointing behind you.
If you clicked but didn’t log in
Close the page, clear your browser history and run a security scan if anything downloaded. Tell your friend their account is hacked (by phone or text, not Messenger).
If you entered your password
- Change your Facebook password immediately, from the real app or facebook.com.
- Turn on two-factor authentication with an authenticator app.
- Check Where You’re Logged In in Settings and log out unknown sessions.
- Check your email and phone number on the account haven’t been changed.
- Warn your friends that any message from you with a link is fake.
- If you can’t get in, follow our Facebook hacked recovery guide.
Change any other account that used the same password. Scammers try it everywhere (credential stuffing).
Spot the next one
Variants include “Look who died,” “OMG is this you?”, “I can’t believe you’re in this” and urgent shock headlines. Any short, emotional message with a link and no context from someone who doesn’t usually write like that should get a phone call first.
How exposed is your login?
If your Facebook password was also used elsewhere, it may already be in breach data. A free email exposure check shows where your email has turned up.
Frequently Asked Questions
Is "Is this you in this video?" a scam?
Yes. The sender’s account is usually hacked, and the link leads to a fake login page.
I clicked the link. Am I hacked?
Not if you didn’t enter your login. If you did, change your password, turn on 2FA and check active sessions.
Why did my friend send it?
They didn’t. Criminals took over their account and sent it to their contacts.
How do I stop the message spreading from my account?
Secure your account, log out unknown sessions and warn friends not to click links from you.