You tapped an Is this you video link on Messenger and entered your Facebook password? What to do next to secure the account and warn friends.
If you clicked an Is this you video link on Messenger and entered your password, open facebook.com yourself, change your password, turn on two factor authentication and end other sessions. Warn friends by phone or SMS that your account may send the same lure. Do not enter more codes on the fake page.
SummaryA friend wrote Really, is this you in this video, with a link. You tapped it. A Facebook login page asked for your password to watch the clip. You typed it. Then you realised there was no video, and now you need to know what to do before the same message goes to everyone you know.
ScanMyShadow's November 2026 explainer describes this Messenger lure: a message from a friend's taken over account, a fake login page, and the same link sent onward to your friends. This guide is for people who have already entered their password. It stays on this Messenger pattern, unlike our wider clicked a phishing link guide. One wrong step can cost you the account, so know what you are doing before you start.
Last checked: 5 November 2026.
If you clicked an Is this you video link on Messenger and entered your password, open facebook.com yourself, change your password, turn on two factor authentication and end other sessions. Warn friends by phone or SMS that your account may send the same lure. Do not enter more codes on the fake page.
Facebook's phishing page says phishing is when someone tricks you into giving out personal information such as passwords, through messages designed to look legitimate, and that when bad actors take control of an account they sometimes use it to send spam to friends or family.
In this lure there is no video. The link exists to harvest your password, then your account becomes the next sender.
Facebook's hacked account help and two factor authentication page cover these steps. If your email or phone was changed, see Facebook hacked email or phone changed.
For the wider pattern of a compromised account messaging contacts, see hacked account messaging friends.
| Check | What to look for |
|---|---|
| Login email and phone | Any number or address you do not own |
| Active sessions | Cities, devices or apps you do not recognise |
| Recent posts and messages | Links or money requests you did not send |
| Pages and Groups you manage | New admins or posts |
| Apps with Facebook login | Games or tools you did not approve |
You can send the same idea in Bahasa Malaysia to relatives who prefer it. Keep it short and avoid any link in the warning itself.
Messenger is widely used for family chats in Malaysia, so one phished account can reach parents, siblings and work groups in minutes. If an older relative forwarded the link to you, help them change their password on the real Facebook site and turn on two factor authentication together.
Meta decides when to lock or restore a compromised account. Your part is the password change, session clean up and a fast warning to people who trust you.
The message looks like a friend asking if a video shows you. Curiosity and mild panic make the tap feel urgent. The page that opens copies a Facebook or Messenger login. This guide is for people who already typed their password on that lure, not for a generic phishing overview. For a broader first response after any phishing tap, see Clicked a phishing link, what to do.
| Check | Why it matters |
|---|---|
| Password change on a known device | Stops password reuse on the stolen capture |
| Two factor authentication | Blocks many password only sign ins |
| Where You're Logged In or session list | Ends browsers the attacker still holds |
| Email forwarding and phone number | Stops the attacker resetting again |
| Recent apps and passwords on the phone | Catches malware that sits under the lure |
If Messenger still shows odd login alerts after you finish the pass, stay on facebook.com/hacked typed by you. Do not tap links inside the original is this you thread.
Tell close contacts through another channel that your Messenger may send odd links until sessions are clear. Ask them not to tap anything that claims to show a video of you.
If you use the same password on Instagram or email, change those too on trusted devices. Password reuse is how a Messenger lure becomes a wider lockout.
After you secure the account, scroll your recent Messenger sends. Delete lure messages you can still remove, and tell group admins if the lure landed in a family or school chat.
If Facebook shows a checkpoint or unusual location alert, finish that official flow on a known device before you add new apps or browsers.
Children or older relatives who share your Wi Fi may have tapped the same lure from another phone. Check those devices for saved fake pages in the browser history.
Keep the original Messenger thread unread only if you need it for screenshots. Once you have proof, archive it so you do not tap the lure again by habit.
Getting help is safer when you cannot get back in after the password change, when your email was changed, or when the account manages a Page or business. Mistakes here can lock you out while the attacker still has a session.
If you are unsure about any step, or the account matters to your income or family, having an experienced team check it is the safer choice. AwareXone does this work. See our Facebook account recovery page.
A case review helps when several family accounts clicked the same lure and need a clear order of steps. We are a Malaysia-based team, independent of Meta, and we use only the official routes. We do not ask for your password or codes, and we cannot promise a result. See our trust page.
More free guides on the same kind of problem.
