# Clicked Is This You on Messenger and Entered Your Password? > You tapped an Is this you video link on Messenger and entered your Facebook password? What to do next to secure the account and warn friends. - URL: https://www.awarexone.com/research/messenger-is-this-you-in-this-video-link-entered-password - Author: Md Shariar Shanaz Shuvon, Founder & CEO, AwareXone - Published: 2026-11-05 - Topics: Facebook, Messenger, Phishing, Malaysia - Related service: Facebook account recovery: https://www.awarexone.com/social-media-recovery/facebook-account-recovery ## Short answer If you clicked an Is this you video link on Messenger and entered your password, open facebook.com yourself, change your password, turn on two factor authentication and end other sessions. Warn friends by phone or SMS that your account may send the same lure. Do not enter more codes on the fake page. ## Summary - The lure arrives in Messenger from a friend's real account and links to a fake Facebook login page. - If you entered your password, change it on the real Facebook site, turn on two factor authentication and end unknown sessions. - Warn friends by phone or SMS that your account may send the same link, and do not use Messenger for that warning while it is compromised. - Facebook says phishing links can lead to sites that steal login credentials and then message people you know. - One wrong step can cost you the account, so know what you are doing before you start. A friend wrote Really, is this you in this video, with a link. You tapped it. A Facebook login page asked for your password to watch the clip. You typed it. Then you realised there was no video, and now you need to know what to do before the same message goes to everyone you know. ScanMyShadow's [November 2026 explainer](https://scanmyshadow.com/blog/2026/11/facebook-messenger-is-this-you-in-this-video-scam.html) describes this Messenger lure: a message from a friend's taken over account, a fake login page, and the same link sent onward to your friends. This guide is for people who have already entered their password. It stays on this Messenger pattern, unlike our wider [clicked a phishing link](https://www.awarexone.com/research/clicked-phishing-link-what-to-do) guide. One wrong step can cost you the account, so know what you are doing before you start. Last checked: 5 November 2026. ## Quick Answer If you clicked an Is this you video link on Messenger and entered your password, open facebook.com yourself, change your password, turn on two factor authentication and end other sessions. Warn friends by phone or SMS that your account may send the same lure. Do not enter more codes on the fake page. ## What Just Happened Facebook's [phishing page](https://www.facebook.com/help/166863010078512) says phishing is when someone tricks you into giving out personal information such as passwords, through messages designed to look legitimate, and that when bad actors take control of an account they sometimes use it to send spam to friends or family. In this lure there is no video. The link exists to harvest your password, then your account becomes the next sender. ## First Ten Minutes After You Entered the Password 1. Close the fake login tab. Do not enter a two factor code if the page asks for one. 2. On a device you trust, go to facebook.com or open the official Facebook app yourself. 3. Change your Facebook password immediately. 4. Turn on two factor authentication, preferably with an authenticator app. 5. Open Settings and check where you are logged in. End sessions you do not recognise. 6. Check the email and phone number on the account. If either changed, follow Facebook's recovery steps. 7. Visit facebook.com/hacked on a device you have used before, as Facebook's hacked account page advises. Facebook's [hacked account help](https://www.facebook.com/help/1216349518398524) and [two factor authentication page](https://www.facebook.com/help/148233965247823) cover these steps. If your email or phone was changed, see [Facebook hacked email or phone changed](https://www.awarexone.com/research/facebook-hacked-email-phone-changed). ## Warn Your Friends Without Spreading the Scam - Call or text friends and family. Do not warn them only by Messenger while your account may still be sending the lure. - Tell them you may have been phished and that they should ignore any Is this you video link from you. - Ask them to tell you if they received the message, so you know how far it spread. - If a friend's account sent you the original link, tell them by phone that their account needs the same password change. For the wider pattern of a compromised account messaging contacts, see [hacked account messaging friends](https://www.awarexone.com/research/hacked-account-messaging-friends). ## Check What the Attacker Could Reach *Post phishing checklist by AwareXone, based on Facebook Help Centre read 5 November 2026.* | Check | What to look for | | --- | --- | | Login email and phone | Any number or address you do not own | | Active sessions | Cities, devices or apps you do not recognise | | Recent posts and messages | Links or money requests you did not send | | Pages and Groups you manage | New admins or posts | | Apps with Facebook login | Games or tools you did not approve | ## Malay and English Warning You Can Send > Note: **Short warning template.** I clicked a fake Is this you video link on Messenger and may have put my Facebook login at risk. Please ignore any video link from my account, and do not enter your password on pages that open from Messenger. I am changing my password now. You can send the same idea in Bahasa Malaysia to relatives who prefer it. Keep it short and avoid any link in the warning itself. ## Malaysian Families on Messenger Messenger is widely used for family chats in Malaysia, so one phished account can reach parents, siblings and work groups in minutes. If an older relative forwarded the link to you, help them change their password on the real Facebook site and turn on two factor authentication together. > Warning: **Do not chase the video.** There is no video to find. Opening the link again, or asking the sender for a new link, only helps the attacker. Do not share your password or codes with anyone who offers to fix Messenger for you. ## What Only Meta Can Decide Meta decides when to lock or restore a compromised account. Your part is the password change, session clean up and a fast warning to people who trust you. ## Why This Messenger Lure Works The message looks like a friend asking if a video shows you. Curiosity and mild panic make the tap feel urgent. The page that opens copies a Facebook or Messenger login. This guide is for people who already typed their password on that lure, not for a generic phishing overview. For a broader first response after any phishing tap, see [Clicked a phishing link, what to do](https://www.awarexone.com/research/clicked-phishing-link-what-to-do). ## Session and Device Pass *Messenger password entry pass by AwareXone, based on Facebook Help Centre read 5 November 2026.* | Check | Why it matters | | --- | --- | | Password change on a known device | Stops password reuse on the stolen capture | | Two factor authentication | Blocks many password only sign ins | | Where You're Logged In or session list | Ends browsers the attacker still holds | | Email forwarding and phone number | Stops the attacker resetting again | | Recent apps and passwords on the phone | Catches malware that sits under the lure | If Messenger still shows odd login alerts after you finish the pass, stay on facebook.com/hacked typed by you. Do not tap links inside the original is this you thread. Tell close contacts through another channel that your Messenger may send odd links until sessions are clear. Ask them not to tap anything that claims to show a video of you. If you use the same password on Instagram or email, change those too on trusted devices. Password reuse is how a Messenger lure becomes a wider lockout. After you secure the account, scroll your recent Messenger sends. Delete lure messages you can still remove, and tell group admins if the lure landed in a family or school chat. If Facebook shows a checkpoint or unusual location alert, finish that official flow on a known device before you add new apps or browsers. Children or older relatives who share your Wi Fi may have tapped the same lure from another phone. Check those devices for saved fake pages in the browser history. Keep the original Messenger thread unread only if you need it for screenshots. Once you have proof, archive it so you do not tap the lure again by habit. ## When It Is Safer to Get Expert Help Getting help is safer when you cannot get back in after the password change, when your email was changed, or when the account manages a Page or business. Mistakes here can lock you out while the attacker still has a session. If you are unsure about any step, or the account matters to your income or family, having an experienced team check it is the safer choice. AwareXone does this work. See our [Facebook account recovery](https://www.awarexone.com/social-media-recovery/facebook-account-recovery) page. ## When a Case Review Makes Sense A case review helps when several family accounts clicked the same lure and need a clear order of steps. We are a Malaysia-based team, independent of Meta, and we use only the official routes. We do not ask for your password or codes, and we cannot promise a result. See our [trust page](https://www.awarexone.com/trust). ## Frequently Asked Questions ### I entered my password on the Is this you page. Am I hacked? Treat the account as compromised until you change the password on the real Facebook site, end unknown sessions and check your email and phone. ### Should I message my friends on Messenger to warn them? Use a phone call or SMS if you can, because Messenger may still send the lure from your account. ### There was no video after I logged in. Why? The video story is the bait. The page exists to steal your password. ### What if I only clicked and did not enter a password? Close the page and avoid the link. Still tell the friend who sent it that their account may be compromised. ### How is this different from a generic phishing guide? This guide focuses on the Messenger video lure after you already entered your password, including how to warn contacts. ## Official sources - [Official: Protect yourself from phishing on Facebook, Facebook Help Centre (read 5 November 2026)](https://www.facebook.com/help/166863010078512) - [Official: Recover a hacked account, Facebook Help Centre (read 5 November 2026)](https://www.facebook.com/help/1216349518398524) - [Official: How two-factor authentication works on Facebook, Facebook Help Centre (read 5 November 2026)](https://www.facebook.com/help/148233965247823) - [Official: Prohibited Commercial Practices, Meta Transparency Center (read 5 November 2026)](https://transparency.meta.com/policies/community-standards/prohibited-commercial-practices/) --- AwareXone is an independent provider serving clients worldwide, not affiliated with any platform. The platform makes the final decision on every account. AwareXone never asks for passwords, OTP codes, backup codes or session cookies.