Facebook Page Policy Violation Message: Is It a Scam?

You manage a Facebook Page for your shop, your brand or your community. A message arrives from an account with a name like a Meta support or compliance team. It says your Page broke a policy or a trademark rule and will be deleted unless you appeal within hours. There is a link to an appeal form. It is a stressful message to get when the Page brings in customers. Facebook lists false claims of policy breaches among common fake messages, so treat the link as the threat until Facebook itself shows a problem. This guide explains how to tell, where real notices from Facebook appear, and what to do if you already filled in the form.

Last checked: 20 October 2026.

#Is the Page Policy Violation Message Real?

Treat it as a scam unless you can see the same problem inside Facebook itself. Facebook's page on suspicious emails and messages that claim to come from Facebook lists false claims that you went against its Community Standards and, for businesses, that you are not in compliance with its advertising and commerce policies as common fake messages. It also lists warnings that something will happen to your account if you do not take an action. Facebook says it will never ask for your password in an email. Check the Page's status inside the app before you do anything else.

#How These Fake Notices Can Look

The wording varies by language and region. The sender may be a new profile or Page with a name built to sound official, sometimes with a Meta logo as its picture. It may message you directly, tag your Page in a comment, or email the address on your Page. The message claims a violation, sets a short deadline and points to a link for an appeal or a review. The linked page may look like a Meta help or privacy page and ask for your name, email, phone number and then your password, and sometimes a login code.

Facebook's guidance on messages asking for your password or personal information is direct: do not trust messages that demand money, offer gifts or threaten to delete or ban your account in exchange for your personal information. Do not click links or open attachments in messages that ask for your password.

#Message, Meaning and What to Do

#Where Real Facebook Notices Appear

Real enforcement information sits inside your account, not in a link from a stranger. Facebook's Account Status page says Account Status shows the status of your main profile, the status of things you manage such as Pages and groups, and any restrictions, which can include Community Standards strikes. To find it, click your profile picture, then Help and support, then Account Status. Menu names can differ slightly between apps and versions.

• Account Status: strikes, restrictions and the status of Pages you manage.
• Your Facebook notifications and the Page's notifications, opened from the app you already use.
• Business Support Home, which Facebook suggests businesses use to check whether there are issues with their business accounts.
• Appeals on the Page itself. Facebook's page on why Pages get taken down or limited says that if you believe your Page was taken down or limited by mistake, you submit an appeal by going to the Page and clicking Appeal at the top.

If none of those places show a problem, treat the message as fake. If they do show a real restriction, deal with it there and still ignore the link in the message. Real problems and scam messages can arrive in the same week, so check each one separately. For Malaysia-based Pages with a restriction that is real, our guide to a restricted Facebook Page covers the official routes.

#How to Report the Fake Message

1. Do not reply and do not open the link.
2. Report the conversation in Messenger or Facebook. Facebook's steps to report a conversation are to open it, click the person's name, scroll down and click Report, then pick a category. Facebook says it will not tell the person who reported them.
3. Report the sender's profile or Page as impersonating Meta, if that option appears.
4. If the message came by email, forward it to phish@fb.com, which Facebook gives as its address for suspected phishing.
5. Block the sender, and delete or hide any fake comment on your Page posts.
6. Warn other admins of the Page, so nobody else follows the link.

#I Clicked the Link or Filled in the Form

If you only opened the page and closed it, change nothing in a panic, but watch your account. If you typed your password, a login code or other details into the form, act now. Facebook's guide on what to do if you've been phished says to first report your account as compromised, and that you can do this whether or not you can still log in.

1. Report your account as compromised through Facebook's official hacked account route.
2. If you can still log in, reset your password and remove logins and devices you do not recognise.
3. Review your activity log for posts, messages or changes you did not make.
4. Check the Page's access list and remove anyone you do not know or trust.
5. If an ad account or saved card is linked, check for charges and contact your bank straight away about any you did not make.

If someone has already taken the Page, Facebook's page on how to recover a hacked Page that you manage says the best step is to submit its Page recovery form while logged in, and that it aims to reply within a day, though some reviews take longer. Our guide on a Facebook Page hacked with your admin removed goes through that situation.

#Make the Next Fake Notice Less Dangerous

• Turn on two-factor authentication for every admin of the Page.
• Keep the admin list short, and remove people who no longer work on the Page.
• Agree within your team that nobody acts on a policy warning from a message or comment, only on what Account Status or the Page itself shows.
• Be careful with Business Manager partner requests from businesses you do not know. Facebook's phishing guidance warns that some include phishing links even though the notification comes from a real Meta domain.

Fake copyright notices follow a similar pattern on other apps. Our guide on fake copyright violation messages covers those variants.

#What Only Facebook Can Decide

Only Meta can decide whether a Page broke a rule, lift a real restriction or return a hacked Page. No outside person can change those decisions, and some Pages are not recovered. The honest work is to keep your account safe, report what happened through Facebook's own forms, and keep records.

#When a Case Review Makes Sense

You do not need help to ignore a fake message. A review can help when you entered details on a fake form and have since lost the Page, when admins were removed, or when ads were run on your card. SocialSafe by AwareXone, AwareXone's account recovery service, works through Meta's official recovery and appeal routes only and never asks for passwords, codes or browser data. See our Facebook Page recovery page for how a review works, and the Trust Center for what we never ask for.

#Frequently Asked Questions