FbTracker
Log in Register
Alerts & intrusion signals

I Got a Facebook Unrecognized Login Alert — What to Do Now

Most damage from these warnings comes not from the login itself but from a fake copy of the alert designed to steal your password. This page shows you how to tell the real one apart, verify it inside Facebook (not from the email link), and act on your own account.

Check my active sessions inside Facebook
Official channels only
Every step routes you through facebook.com and the real app — never a link in an email.
No password, ever
We never ask for credentials or codes, and neither does a genuine Facebook alert.
Owner-only
Guidance is for your own account, not covert access to others.

If a message asks for your password or a one-time code, it's not from Facebook — close it and verify in the app instead.

The alert itself is a scam target — spot the fake before you click

⚑ "Your account was hacked — click here within 24 hours or it will be permanently deleted."
Real Meta notices don't threaten instant deletion on a countdown. Urgency plus a deadline is the classic pressure tactic to make you skip verification.
⚑ A login-alert email links to a page like facebook-security-login.com asking you to "re-enter your password to confirm it's you."
Facebook never asks you to confirm identity by typing your password into a page reached from an email link. The domain isn't facebook.com — it's a credential-capture copy.
⚑ "Reply with your login code / one-time code to cancel the unauthorized access."
No legitimate service asks for your 2FA or one-time code. Anyone requesting it is trying to complete a takeover of your account, not stop one.
⚑ A DM or message: "I'm from Facebook Security, verify your account here to remove the suspicious login."
Meta does not contact you through personal DMs to collect credentials. Support and security notices appear inside the app's notification and Security areas.

✓ Genuine login alerts appear inside Facebook itself: Settings → Password and security → Where you're logged in, and in your official notifications.

✓ Verify by opening the Facebook app or typing facebook.com yourself — never by following a link inside the alert email or message.

✓ Facebook may email you, but the real action (review session, log out device, change password) is completed on facebook.com, never on a third-party page.

✓ When unsure, ignore the message entirely and go straight to Security Checkup — you reach the same controls without touching any link.

How it works

  1. 1
    Don't click the alert's links
    Leave the email or message untouched; open Facebook yourself instead.
    ⏱ under 1 min · You're now on facebook.com or the official app, not a page you were sent to.
  2. 2
    Verify inside the app
    Go to Settings → Password and security → Where you're logged in.
    ⏱ 1-2 min · You see the real list of active sessions with device, location, and time.
  3. 3
    Compare against your own activity
    Match each session to a device and place you recognize.
    ⏱ 2-3 min · Every session is yours, or one clearly is not.
  4. 4
    Log out anything you don't recognize
    Tap the unknown session and choose Log out; use "Log out of all" if unsure.
    ⏱ 1 min · The suspicious session disappears from the list.
  5. 5
    Change password and turn on 2FA
    Set a new unique password and enable two-factor authentication.
    ⏱ 3-5 min · New password saved; 2FA prompt confirmed on your trusted device.
  6. 6
    Run Security Checkup
    Let Facebook's official tool review alerts, devices, and recovery info.
    ⏱ 3-5 min · Checkup finishes with a green all-clear or a clear list to fix.

There is no real 24-hour countdown. Take the time to verify — a rushed click is exactly what a phishing copy is counting on.

We do

  • ✓ Show you how to verify a login alert inside official Facebook surfaces
  • ✓ Explain how to read your own active sessions and login location history
  • ✓ Guide owner-only recovery: log out devices, change password, enable 2FA
  • ✓ Help you tell a genuine Meta alert from a phishing copy

We never

  • ✗ Ask for your password, one-time code, or any login detail
  • ✗ Access, log into, or monitor anyone else's account for you
  • ✗ Reveal an intruder's real identity or promise to "catch the hacker"
  • ✗ Claim we can bypass 2FA or recover permanently deleted data

Everything here is for securing your own account. We never handle your credentials and never touch your account.

FAQ

How do I know if a Facebook login alert is real or a phishing scam?
A genuine alert can be confirmed inside Facebook itself: open the app or type facebook.com yourself and go to Settings → Password and security → Where you're logged in. If the same warning appears there, it's real. Treat any email or message that links you to a login page, threatens instant deletion, or asks for your password or code as phishing — even if it looks identical to Facebook's design.
The email says my account will be deleted in 24 hours unless I confirm. Is that true?
No. Facebook does not run 24-hour deletion countdowns tied to a login alert, and a real security review never depends on you clicking an email link. That pressure and deadline are the scam. Ignore the link, open Facebook directly, and check your sessions and Security Checkup at your own pace.
Should I click the "This wasn't me" button in the alert email?
Not from the email. Even legitimate-looking buttons can be spoofed to send you to a credential-capture page. Instead, open Facebook yourself and use Where you're logged in to log out any session you don't recognize. You reach the exact same action safely, without trusting the message.
I verified inside the app and there really is an unknown session. What now?
Log out that session immediately (or use "Log out of all"), then change your password to something new and unique and turn on two-factor authentication. Finish with Facebook's Security Checkup. All of this happens on your own account through official Facebook controls — no third-party tool needs your login.
Can you tell me who logged in or catch the hacker?
No — and be cautious of any service that promises to. Facebook shows you the device type, approximate location, and time of a session, but not a person's real identity. Our role is to help you recognize a real alert, avoid phishing, and secure your own account. We can't and won't identify an intruder.
We use cookies.
We use cookies to collect data to improve your experience on our website. Read our usage policy cookies You can your preferences at any time.