Facebook Marketplace Phishing Scam Uses Your Real Name and Phone Number

What happened

A phishing scam uncovered in October 2026 sends targets a text message claiming that a Facebook Marketplace listing has been created under their name, and the message includes the person's real name and phone number to make it look legitimate. The text contains a link that leads to a fake Facebook login page designed to capture your email and password. Researchers believe the name-and-number pairings likely come from data breaches, which is why the scam feels personal.

Who is affected

Anyone who owns a phone and uses Facebook, especially older adults who may not realize their personal details can be bought from past data breaches and used to make scam messages look real.

Why it matters

Scammers use your real name to build trust and pressure you into acting quickly. Older adults are frequent targets of phishing because attackers assume they may be less familiar with these tactics. Knowing that your details can come from a breach, not from Facebook, helps you pause and verify instead of tapping a link that could hand over your account.

Practical steps to take

1. 1Don't tap links or reply to unexpected text messages about a Facebook Marketplace listing you didn't create, even if they use your real name.
2. 2If you're worried, open Facebook yourself from the app or by typing facebook.com directly; never use a link from a text.
3. 3Turn on two-factor authentication on your Facebook account so a stolen password alone can't get someone in.
4. 4Report suspicious messages to Facebook and delete the text; never enter your password on a page you reached from a text link.

Important dates

This scam is active now; review your Facebook security settings as soon as possible.

Effective: Active scam reported October 2026

Sources

• MalwarebytesPublished 2026-10-13