Very likely. “Your Facebook account will be disabled” or “your page violated our policies — appeal within 24 hours” emails and Messenger messages are phishing. The link leads to a fake Facebook login (and often a fake “confirm your identity” step) designed to steal your password and two-factor code, then take over your account or business page.
Real Meta notices appear inside Facebook itself — in your notifications and the Support Inbox — not only in an email with a countdown and an external link. Genuine login pages live on facebook.com, never a look-alike domain. If you're worried about your account, open the Facebook app or type facebook.com yourself and check there. Don't click the email's link; paste it into a scam check first, and never enter your password or codes on a page you reached from an email.
Free — no email needed
What to do right now
1Don't click — open the Facebook app or type facebook.com yourself to check.
2Turn on two-factor authentication and review active logins.
3Paste the email's link into Scam Detective and report the message as phishing.
Get free scam alerts
Account-phishing scams like this “Facebook account disabled” email are spreading fast — get a heads-up on the next one. Optional — the steps above are free either way.
These are the signals to watch for with this “Facebook account disabled” email. Not sure about a link involved? Our report grades every one and tells you exactly what it found.
1. A 24-hour “appeal or lose your account” deadline
Manufactured urgency is the core of the scam.
2. A login link that isn't facebook.com
Look-alike domains capture your password and 2FA code.
3. Sent by email or Messenger, not in-app notifications
Real policy actions show up inside Facebook's Support Inbox.
4. Vague “policy violation” with no specifics
Generic accusations are meant to scare, not inform.
5. Requests for your password or 2FA code
Entering these on the fake page hands over your account.
This page is general guidance to help you decide — not a verdict on any specific business, and not legal or financial advice. We check URLs and sites; we don’t recover funds or execute takedowns.