Question

FRAUD ALERT HELP  My husbands business account got hacked and we’ve got all these PayPal charges from Facebook, there’s used car sales ads running nationwide and landing on his real estate website. Has anybody run into something like this? Any insight on how to shut this down stat would be super helpful. I know FB isn’t the easiest to get a hold of if you aren’t spending a good church of change so any insight would be helpful.  

Answer 1

Something else was probably hacked. I highly doubt Facebook was. Who has your passwords/access?  

Comments

@kehoe48 literally him and me are the only ones who have access to his business account.  

---

Do you both have 2 factor authentication enabled?  

---

@tin950 for FB? I don’t believe so. Honestly, I don’t even know that I’ve ever even logged into the account.  

---

Did you use the same email and password on other sites? If so, see if that login info was compromised in any other big data breaches here.  
https://haveibeenpwned.com

---

UPDATE: Yes, somebody got into the business manager and is running an ad for $15k/day. we can't adjust or turn it off because we owe money (obviously). How do you even contact FB to report this?  

---

Just turned on all 2 factor for literally everything. Thank you!  

Answer 2

Change all the cc acts. Close and reissue all the cc cards

Comments

@niki236 they used PayPal. It’s still pending and it went through the personal checking somehow. We don’t even have that account linked to any PayPal.  

---

@additament65 call your bank to reverse it. They should be able to. PayPal also has fraud acct

---

@niki236 ya we are going to do that, my questions are about the Facebook ads that are running and landing on his website. Outside of payment reimbursement from the bank, is there anything on the FB side that we should be concerned about?  

---

@niki236 UPDATE: Yes, somebody got into the business manager and is running an ad for $15k/day. we can't adjust or turn it off because we owe money (obviously). How do you even contact FB to report this?  

Answer 3

Firstly log into PayPal and remove the authorisation for Facebook to be able to use the account, then flag all of the payments in PayPal to start the dispute process. Change all of your passwords , if someone has got your fb one there’s a high chance they have others.  

Comments

@libre ya I feel you. The problem is we have no idea what PayPal account they’re using. Neither of us have one linked to that account. It’s looking like it was created. So we’ve got to deal with PayPal fraud.  

---

Paypal has to have a bank account connected and approved to use it, or a valid credit card. I’m confused how are you being charged?  

---

@libre UPDATE: Yes, somebody got into the business manager and is running an ad for $15k/day. we can't adjust or turn it off because we owe money (obviously). How do you even contact FB to report this?  

Answer 4

Same thing almost happened to my two friends. One was set at $400 a day and the other one $2700 a day but they saw it before it went live.  

Answer 5

This happened to us a few weeks back. An employee’s Facebook was hacked/used to gain access to BM. They removed all of us from BM and started spending on 30+ cards to a Russian site. We contacted a rep, and worked with Facebook to provide proof they were our businesses, shut down and reissued all new cards, and were refunded. It was a real nightmare - but be sure anyone who has access to BM is setup with two factor authentication and for business continuity and disaster recovery purposes, consider having different cards for each network you advertise on so that if this were to happen again and you can cancel the cards only used for Facebook, preventing it from impacting spend on all of the other networks you advertise on. It’s a process, but it’ll get sorted out. Wish you the best of luck.  

Comments

@luann7/activity" class="qa-user-link">luann7 oh wow. @luann7/activity" class="qa-user-link">luann7 that’s nuts! Thank you for all of that insight. I did add 2-factor to his and also to all of our accounts so anybody who accessed needs to provide it. I made sure nobody else was added to any of the accounts that weren’t supposed to be, so hopefully we’re in the clear. On the plus side, we caught it early because that account doesn’t have ads running. If we were running campaigns it would have been tough to catch early. You’re awesome and thank you for your insight!  

Answer 6

Did you recently downloaded and software on your computer? If yes then clear your computer first. If it's s trojen then whatever you do will not help you.  

Answer 7

Happened to us too. Facebook reversed the charges (quickly), but we've never been able to advertise from that business manager again. Also report these to the FBI cyber crimes department. I'd love to think someone is hunting down these hackers and offing them while they sleep but I doubt it is happening.