Restricted From Advertising on Meta? What to Do in Malaysia

You open Ads Manager to boost this week's promotion and a banner stops you: "Your account is restricted from advertising." Your Facebook profile still works. Your Page is still there. But every attempt to create an ad fails, even in a brand new ad account.

That pattern is the clue. The restriction sits on your personal profile, not on one ad account, so switching accounts does not help. The way back is a review request inside Meta Business Support Home, after any identity or security step Meta asks for. The number of reviews is limited, so the first one should be your best.

This guide explains how a personal advertising restriction differs from a disabled ad account or a restricted business portfolio, how the review works, what to prepare, and the mistakes and scams that make things worse for Malaysian advertisers.

Last checked: 29 September 2026.

#What Does "Your Account Is Restricted From Advertising" Mean?

It means Meta has stopped your own Facebook or Instagram profile from advertising. Meta's page about advertising restrictions says that if a personal profile is restricted, you are not allowed to use Meta products to advertise, you cannot create new ads, and any ad account where you are the only attached user may also be disabled. Other people in the same business portfolio, ad account or Page may still be able to advertise. To challenge it, go to Meta Business Support Home, open the account status overview, select the restricted account and choose "Request review" under "What you can do". Meta reviews it and decides, and its decision after a review is final.

#Which Restriction Do You Actually Have?

Meta can restrict four different things from advertising: a business portfolio, an ad account, a Page and a personal profile. Each one has its own notice and its own review, so work out which it is before you do anything else. The notice may be worded slightly differently in the app, on the web or in your region, and some people see a variant that mentions a "professional ad account". Business Support Home lists exactly which of your assets carry a restriction.

If your whole portfolio is restricted, read our guide to a business portfolio restricted from advertising instead. If only one ad account is down, the guide to a disabled Facebook ad account is the closer match.

#Why Meta Restricts a Personal Profile From Advertising

Meta lists five kinds of reason on its advertising restrictions page. The notice in Business Support Home should tell you which one applies to you.

• A policy breach: the advertiser did not follow the Community Standards, the Meta Advertising Standards, the Commerce Policies or other Meta terms.
• A suspected hack: Meta suspects the business portfolio or its assets have been compromised.
• Missing two-factor authentication: the advertiser does not meet Meta's two-factor authentication requirements for account security.
• Payment problems: Meta notices unusual payment or account activity, or high rates of failed or disputed payments.
• Temporary caution: Meta may limit spending or payment features until it is sure the advertiser is consistently following its policies.

Meta's Advertising Standards add that advertising accounts must be linked to a legitimate business or individual, and that signs of misrepresentation, suspicious activity or inauthentic behaviour can lead to a verification request. The same standards say the business assets Meta reviews include user accounts, which is your personal profile.

#How to Request a Review, Step by Step

The review lives in Meta Business Support Home. There is no separate email address and no paid route. Meta's page on requesting a review for a restricted advertising account and its troubleshooting page describe this sequence:

1. Use a computer, and log in to Facebook with the profile that shows the restriction.
2. Open Meta Business Support Home and select "Account status overview" in the left menu.
3. Select the restricted account. For a personal restriction, that is your own profile.
4. Read the "What you can do" section. Meta may ask you to confirm your identity, complete verification, secure your account or request a review.
5. Finish every step listed before the review option. If a security step is shown, do it first.
6. Select "Request review" and complete the on-screen steps. If there is a text box, write a few calm, factual sentences.
7. Submit once, then check Business Support Home and your Facebook notifications rather than sending the request again.

Meta says the review is typically completed in 48 hours, although it can take longer. If Meta decides the restriction should stay, it stays and the account remains blocked. If it decides otherwise, the restriction is lifted. Ads that were running before the restriction do not restart on their own, so turn them back on in Ads Manager afterwards.

Meta's Advertising Standards also name Account Quality as a place to request this review. Use whichever one your notice links to, and do not file the same review twice.

#If You Think You Were Hacked First

A takeover can get an innocent owner restricted. Someone gets into your profile, adds themselves to your portfolio, and runs ads you never made. Meta's page on recovering a hacked or compromised business portfolio lists the signs: new admins or users you did not approve, ad accounts or campaigns nobody on your team created, sudden unexplained spend, and posts that do not look like yours.

If that matches, secure the account before any review:

1. Secure the email address on your Facebook profile: change its password and sign out other sessions.
2. If you cannot get into Facebook, go to facebook.com/hacked on a device you have used to log in before.
3. Turn on two-factor authentication in Accounts Center, under "Password and security". Facebook's two-factor authentication page lists a security key, an authentication app or text message codes, and offers recovery codes for when your phone is unavailable. Store those codes offline and never share them.
4. In the business portfolio, run the Security Checkup and remove any people, partners or ad accounts you do not recognise.
5. Contact Meta Support through Business Support Home, as Meta's hacked portfolio page advises.
6. When you request the review, say plainly that the account was taken over, roughly when, and that the ads in question were not yours.

If the attacker charged your card, call your bank straight away. Meta lists disputed payments among the triggers for restrictions, so keep a note of which charges were fraudulent and mention the takeover in your review. Our guide to a hacked Facebook Business Manager walks through the portfolio side in more detail.

#What to Prepare Before You Submit

Review screens give you little space. Having this ready lets you answer identity checks accurately and explain yourself in one go.

• Screenshots of the restriction notice and the "What you can do" section, with the date visible.
• Your profile name exactly as it appears, and an ID that matches it, such as your MyKad or passport, for any identity check shown inside Business Support Home.
• A list of the ad accounts, Pages and portfolios you use, and your role on each.
• The last ads you ran, what they promoted, and the landing page each one linked to.
• For a hack: login alerts, emails from Meta about changed details, and screenshots of ads or admins you did not add.
• Your registered business details, if the notice asks you to verify a business.
• Three or four sentences you can paste: who you are, what you advertise, why you believe the restriction is wrong, and anything unusual such as a takeover.
• A note of when you submitted and what you said, so you never resubmit by accident.

#Mistakes That Waste a Limited Review

Reviews often fail because of what happens around them. Avoid these:

• Requesting the review before finishing the identity or security steps Meta listed.
• Asking a friend, relative or freelancer outside the business to run your ads as a workaround. Meta's Advertising Standards prohibit helping anyone evade or circumvent its enforcement.
• Buying or renting an ad account, a "verified" profile or admin access. The same standards say you must not sell, rent, buy or exchange site privileges such as administrative access.
• Opening new profiles or ad accounts to get around the restriction.
• Writing a long, angry message, or making claims you cannot back up.
• Leaving an ad running that breaks Meta's policies. Fix or remove the problem content before you ask for a review.
• Clicking "appeal" links in emails, Messenger or chat apps instead of going to Business Support Home yourself.

#How Scammers Use This Notice in Malaysia

Fake advertising warnings are one of the oldest tricks aimed at Page owners. Facebook's page on suspicious emails claiming to be from Facebook says scammers send false claims that a business is not complying with the Meta Advertising Standards, often with a warning that something will happen to the account unless you act. In Malaysia the same message can arrive in English or Malay, for example saying your Page will be "disekat" unless you click a link today.

The Malaysian government's NSRC 997 page asks victims to call within 24 hours of discovering the scam, so banks can try to block the money. For a phishing page or a hacked account with no money lost, CyberSecurity Malaysia's Cyber999 reporting channel takes reports through an online form or by email. Our breakdown of fake Meta support pages shows what these messages look like.

#What If the Review Is Rejected?

A rejected review usually means your profile cannot advertise on Meta. Before you accept that, check three things. Did you review the right asset, your profile rather than an ad account? Was a hack involved that you never reported? And did an identity check fail for a fixable reason, such as a name that does not match your ID?

If none of those apply, Meta's own page says other people who already belong to the business portfolio, ad account or Page may still be able to advertise. They should run the ads from their own logins, and nobody should ever sign in as you. Do not create a replacement profile to get round the decision.

#When Expert Recovery Help Makes Sense

Many advertisers can handle this alone, and everything above is written so you can. A second opinion helps when ads are your main source of sales, when a hack and a restriction are tangled together, or when you are unsure which asset to review with a limited number of attempts. SocialSafe by AwareXone, our recovery service, looks at the notice and what has already happened, then tells you honestly whether an official route is still open. Our Business Manager recovery service explains how that works, and our Trust Center sets out what we will never ask you for.

#Frequently Asked Questions