# Meta Business Partner Request Scam: Real Email, Fake Link > Got a partner request from an unknown business through a real Meta email? Learn why the sender can look genuine and how to remove a partner you accepted. - URL: https://www.awarexone.com/research/meta-business-partner-request-scam - Author: Md Shariar Shanaz Shuvon, Founder & CEO, AwareXone - Published: 2026-10-21 - Topics: Meta Business Suite, Facebook, Scams, Business - Related service: Business Manager recovery: https://www.awarexone.com/business-manager-recovery ## Short answer A partner request email from Meta can be real and still be a scam. Facebook warns that some Business Manager partner requests include phishing links and come from a legitimate Meta domain. If you do not know the business named in the request, do not click any links. Check your business portfolio inside Meta Business Suite instead. ## Summary - Facebook warns that malicious actors have sent Business Manager partner requests that include phishing links, through notifications from a legitimate Meta domain. - Facebook's advice is direct: if you do not know the person or business named in the partner request, do not click any links. - A genuine Meta sender address does not make the request safe, because Facebook says some of these requests include phishing links. - Anyone with full control of a business portfolio can remove a partner from the Partners section of Settings in Meta Business Suite. - If you entered your password after clicking, Facebook says to report your account as compromised, even if you can still log in. You run ads or manage a Page through Meta Business Suite. An email arrives saying a business you have never heard of wants to become a partner or share assets with your portfolio. The sender address checks out as Meta. The design looks like every other Meta notice. Inside, the business name or the message carries a link and an urgent reason to click it. This is the partner request scam, and it works because part of it is real. This guide explains what Facebook says about it, what to check, and how to remove a partner you have already approved. Last checked: 21 October 2026. ## Is a Meta Business Partner Request Email a Scam? It can be, even when it really comes from Meta. Facebook's page on how to [protect yourself from phishing](https://www.facebook.com/help/166863010078512) opens with a warning that it has seen malicious actors sending Business Manager partner requests that include phishing links. It asks people to be cautious because these notifications come from a legitimate Meta domain, facebookmail.com. Its advice is that if you do not know the person or business mentioned in the partner request, you should not click on any links. ## Why a Real Meta Email Can Carry a Fake Link Partner requests are a normal feature. A business can ask to work with yours, and Meta sends a notification so you can respond. The notification can be genuine while the request inside it comes from a business you do not know. Facebook says these partner requests include phishing links even though the notification comes from a legitimate Meta domain. Checking the sender address is useful for spotting fake emails in general, and Instagram's [phishing page](https://help.instagram.com/670309656726033) lists Meta addresses such as facebookmail.com and business.fb.com. Here, that check will pass, so it is not enough on its own. ## Reading the Email Line by Line - Sender: a genuine Meta address. In this scam that is expected, so it tells you nothing about the link. - Business name: check whether you know this business. If you do not, Facebook says not to click any links. - Message text: any urgency about deadlines, appeals or policy checks came from the requester, not from Meta. - Buttons and links: anything that leads to a login page outside Meta Business Suite should be closed straight away. - Your own records: if nobody in your team expected a partner request, there is no reason to respond to it. ## What to Check Before You Click Anything *Wording changes between campaigns. A real notification can still carry content written by a stranger.* | What you see | What it may mean | Safer move | | --- | --- | --- | | A partner request from a business you do not know | Possibly a phishing lure inside a real notification | Do not click links. Facebook says not to if you do not know the business | | A web address or warning in the request | Possibly a phishing lure | Treat it as a scam sign. Do not open it | | A claim that your ads or account will be restricted | Pressure to make you act fast | Check Business Support Home yourself | | A request to log in, verify or appeal through a link | A fake login page that collects your details | Close it and open Meta Business Suite directly | | A request from an agency you do work with | Possibly genuine | Confirm with your contact at the agency before accepting | Facebook's page on [suspicious emails or messages claiming to be from Facebook](https://www.facebook.com/help/225602007465207) lists false claims about breaking Meta's advertising standards and warnings that something will happen to your account as typical of fake messages. It says that businesses can go to Business Support Home to check whether there are issues with their business accounts. Use that, not a link in an email. ## How to Report the Partner Request 1. Do not accept the request and do not click any link in the email. 2. Forward the email to phish@fb.com, which Facebook lists for reporting suspicious emails. 3. Tell anyone else with access to your business portfolio not to act on the request. 4. Check Business Support Home for real issues with your business accounts, as Facebook suggests. ## How to Remove a Partner You Already Accepted Meta's page on how to [remove partners from your business portfolio](https://www.facebook.com/business/help/2222659621282858) says you can remove a partner, such as an agency, if you have full control of the business portfolio. Its steps are: 1. Go to Settings in Meta Business Suite for your business portfolio. 2. Click Partners in the left menu. Meta says that if you cannot see Partners, you may not have full control of the portfolio. 3. Click Options in the top right, then select Remove from business portfolio. 4. Click Remove partner. Meta notes that removing a partner is different from removing someone inside your organisation. After removing an unknown partner, review the people listed in your portfolio and the access on your Pages, ad accounts and Instagram accounts, and remove anyone you do not recognise. If nobody left in your organisation has full control, Meta's page on how to [submit a request to get full control of a business portfolio](https://www.facebook.com/business/help/474856681929983) describes the claim route. ## If You Clicked and Entered Your Login Details Facebook's page on [what to do if you've been phished](https://www.facebook.com/help/434918221794966) says to first report your account as compromised, and that you can do this whether or not you can still log in. If you can still log in, it lists resetting your password, removing unknown logins and devices, and reviewing your activity log. It also says that if you think financial accounts were accessed or payments were made, contact your bank straight away. For a business with ad accounts, also check for ads you did not create and for payment methods that changed. If your portfolio has already been taken and ads are running on your card, our guide on a [hacked Meta Business Manager and ad spend chargebacks](https://www.awarexone.com/research/meta-business-manager-hacked-ad-spend-chargeback) covers the money side, and our guide on [an agency that locked you out of a Facebook Page](https://www.awarexone.com/research/agency-locked-us-out-of-facebook-page) covers partner access disputes. > Warning: **Never share these.** Your password, login codes, backup codes or anything copied from your browser. A real partner request never needs them, and neither does any genuine support agent. ## Reduce the Risk for Your Team - Agree that nobody accepts a partner request unless it was expected and confirmed with the agency or business by phone or an existing email thread. - Keep the number of people with full control of the portfolio small, and review it when staff change. - Turn on two-factor authentication for everyone with access to the portfolio. - Review the Partners list in Settings from time to time and remove partners you no longer work with. Fake policy notices are a related problem. Our guide to the [Facebook Page policy violation message scam](https://www.awarexone.com/research/facebook-page-policy-violation-message-scam) covers those. ## When a Case Review Makes Sense If you spotted the request and ignored it, you may not need help. A review can help when someone accepted the request and access to Pages or ad accounts has changed, when admins were removed, or when ads were run on your payment method. SocialSafe by AwareXone works through Meta's official recovery routes only and never asks for passwords, codes or browser data. See our [Business Manager recovery](https://www.awarexone.com/business-manager-recovery) page for how a review works and the [Trust Center](https://www.awarexone.com/trust) for what we never ask for. Meta alone decides what it restores. ## Frequently Asked Questions ### Can a scam email really come from facebookmail.com? Facebook warns that malicious partner requests with phishing links have come through notifications from its legitimate domain, facebookmail.com. The email is real; the link inside may not be. ### What should I do with a partner request from a business I do not know? Facebook says not to click any links if you do not know the person or business. Report it to phish@fb.com and do not accept it. ### How do I remove a partner from my business portfolio? With full control of the portfolio, go to Settings in Meta Business Suite, click Partners, click Options, select Remove from business portfolio, then click Remove partner. ### I cannot see Partners in my settings. Why? Meta says that if you cannot see Partners, you may not have full control of the business portfolio. Ask the person who does, or look at Meta's full control request route. ### I entered my password after clicking. What now? Facebook says to report your account as compromised, reset your password if you can, and remove unknown logins and devices. Then check your portfolio's people, partners and ad accounts. ## Official sources - [Official: Protect yourself from phishing on Facebook (read 21 October 2026)](https://www.facebook.com/help/166863010078512) - [Official: You got a suspicious email or message claiming it's from Facebook (read 21 October 2026)](https://www.facebook.com/help/225602007465207) - [Official: Remove Partners From Your Business Portfolio (read 21 October 2026)](https://www.facebook.com/business/help/2222659621282858) - [Official: What to do if you've been phished on Facebook (read 21 October 2026)](https://www.facebook.com/help/434918221794966) - [Official: Protect yourself from phishing on Instagram (read 21 October 2026)](https://help.instagram.com/670309656726033) - [Official: Submit a Request to Get Full Control of a Business Portfolio (read 21 October 2026)](https://www.facebook.com/business/help/474856681929983) --- AwareXone is an independent Malaysia-based provider, not affiliated with any platform. The platform makes the final decision on every account. AwareXone never asks for passwords, OTP codes, backup codes or session cookies.