Existing Terms and Update Scam

This is a new scam on Facebook and is titled Existing Terms and Update.

Existing Terms and Update scam

About Pinoymix.com

Pinoymix.com is one of our oldest websites and has been in existence since 2004. It is a Filipino-themed website with recipes and other information. We have a Facebook page for Pinoymix as well.

What is the "Existing Terms and Update" scam?

This morning, someone made a Facebook post tagging Pinoymix.com and several other websites.

Existing Terms and Update scam message

The content of the message is as follows:

Existing Terms and Update'
Hi, I'm from Facebook Support-Team
This is an Important message from Facebook for admin page BXPunisher Radio Show
Your page was detected with copyright infringement. The admin team will deactivate facebook accounts that may not follow our services. Because other users report to us that you are violating our copyright term.
. Sharing photos and videos that violate copyright
. Using fake photos and names
. Harming others
. Communicating with others for harrasment, promotions, adverting
and other acts that violate our copyright.
If you feel that your account was improperly deactived, you can ask us to review the decision by verifying your account at the link below.
Account Confirmation : http://aprove-login-html.duckdns.org/?update
Remember we published this copyright provision stopping malicious and fraudulent treatment. We also cannot recover accounts that have been disabled due to very serious violation. Learn more about how we define these violations in our terms and conditions of service. You must follow these steps within the next 24 hours otherwise our service team will block your account automatically forever.
FB Security ©️ 2024 Page Support All rights reserved
Pinoy Sweet Delicacies
PinoyLocalle
Pinoydreamersclub
Pinoymix.com
Places apart
Planet Grapes
Planet Positive
Plantanim
Plante d' Eri
Planter’s Choice -Imus Cavite
Plantita Doc
Plants & Pots by Gaby
Plants Pots & Flowers
Plants R Us
Plants and Pots by Mina
Plants for Sale - Valenzuela City
Plants ni Tita
Playdress
Playful Paws Pet Supplies
Pompano Beach, FL - Lost Dogs, Cats & Pets
Poofy Organics Live Healthy
Popular travel
Porch Light Reflections
Posh Poms by Lei
Poshnails SM Dasma
Positive Thinking
Pots N' Snakes
Pound for Pound Fitness PEMBO
PowerGrow Metro Manila
Powerful Cars
Powerman Duathlon
Pregroe
Presco
Prestige Prime Properties
Pride365
Prideland Howl Kennel
Primehomes Real Estate Development Inc.
Primo Plants
Princess Melva Dee
Prodotti in TV
ProductAutopilot
Professionals
Prosthetics Make up artist / Body Art
Protectiontrughgold
Pst Segun Banwo
QATBP Kennel
QUKAU
QubiMall

What are the signs of scam?

At first glance, many admins tagged in this post would feel intimidated. At least a few may click on the link, which will turn out to be a malicious link to steal their information.

The danger of these links vary. They may steal different kinds of information, and do other horrible things. In the worst case, visiting malicious links can infect your computer and steal money from your bank accounts and other financial institutions that you login to using your computer.

All this happens after you click on the malicious link in the message. Just reading the Facebook post should not do anything.

If you get a scam message, email or are tagged in a Facebook post like this, first pause and take a deep breath.

These are the signs of scam in this message:

• Who posted it?
• Totally fake webpage links
• Improper grammar
• Sense of urgency
• Mass tagging of multiple Facebook pages
• Fake logo using Facebook logo color
• What did they sign at the bottom of the message?

Who posted it?

This Facebook post was made by someone who created the account very recently.

Move the mouse over the account name without clicking on it. You will see the information about the account as a tooltip.

"Existing Terms and Update" account

As you can see, it is a privately created page with category Internet Marketing Service and has nothing to do with Facebook. It also has 0 Followers.

Totally fake webpage links

In the Facebook post, the scammer mentions this:

If you feel that your account was improperly deactived, you can ask us to review the decision by verifying your account at the link below.
Account Confirmation : http://aprove-login-html.duckdns.org/?update
Remember we published this copyright provision stopping malicious and fraudulent treatment. 

The so-called Account Confirmation URL has nothing to do with Facebook. It is a website hosted somewhere with and using free DNS service like Duck DNS.

Scammer is using free DNS service Duck DNS

If you want to make sure the webpage link is from Facebook, look for the facebook.com link as the central base URL. That is the starting step for verifying the authenticity of a message or email. Misspellings and usage of subdomains or weirdly named directory structures are big red flags.

When in doubt, ask Facebook support or report to Facebook immediately.

This is the correct URL to Facebook support: https://www.facebook.com/help/

Improper grammar

Most scam messages or emails over the last few decades have included improper grammar and English usage.

Sense of urgency

Usually, messages with "do X within 24 hours" or something similar are red flags. The scammer tries to make the victim panic by imposing a short deadline and give in to their demands.

Occasionally, social media and financial institutions (banks, credit card companies) do send reminders with a deadline, but not this short. And definitely with better grammar.

Watch out for these kind of "urgent action needed" sentences in the scam message.

Mass tagging of multiple Facebook pages

This is something mostly found on social media. The scammer tags several people or business pages in one scam Facebook post.

Sometimes, the scammer sends private messages to several victims, like a group chat message.

That is a lazy scammer in action.

My guess is they found a list of Facebook pages in alphabetical order, probably posted in a forum or another group. The lazy scammer decided to target them all in one broadcast message, hoping that at least a few will fall to the scam. Unfortunately, there are people who fall scam to multiple-publisher tagged messages like this.

If you have fallen victim to scams like this, feel free to contact us and we can give you tips on what to do next.

Fake logo using Facebook logo color

The logo of the scammer's Facebook account suspiciously resembles the Facebook logo, with the blue circle and thick white text.

The scammer's logo color in RGB is #5d93ff, which translates to:

Facebook logo color in RGB is #357dec, which translates to:

The scammers logo contains a white checkmark and not the regular f logo.

Occasionally, scammers may actually use Facebook's logo to look more authentic. Watch out for that as well.

What did they sign at the end of the message?

This message is signed with:

FB Security ©️ 2024 Page Support All rights reserved

The scammer signed the message with a fake Facebook team name. Facebook would sign themselves as "Facebook" and not "FB".

The message started with:

Hi, I'm from Facebook Support-Team

and ended with:

FB Security ©️ 2024 Page Support All rights reserved

Everything about it screams fake.

Report the scam post to Facebook

You can report scam posts like this to Facebook.

Click on the three dots ... on the top right. You get a drop down. Select Report post for going against Community Standards. Reporting to Facebook

Then, select Spam and click on the Submit button. And then click on the Done button.

When many people collectively report scam posts like this, Facebook may do something like shutting them down or at least delete the scam post.

Related Posts

If you have any questions, please contact me at arulbOsutkNiqlzziyties@gNqmaizl.bkcom. You can also post questions in our Facebook group. Thank you.