Original Phishing Message

From: Meta for Business <appeal-form[@]metaforbusiness-support[.]com>
Subject: Notification of Account Suspension

Tips for Detection

• The sender’s email address was from [@]metaforbusiness-support[.]com (which is not a valid FB/Meta domain). Always double-check the sender’s email address and don’t solely rely on the display name.
• The email had a generic greeting (e.g. Dear User or Dear Administrator).
• The email tries to induce fear that your email service will be removed after 24 hours. Don’t be misled by the sense of urgency!

Text of Phishing Message

From: Meta for Business <appeal-form[@]metaforbusiness-support[.]com>
Subject: Notification of Account Suspension

Dear Administrator of [department name] | Tacoma WA,

We regret to inform you that your account on our platform has been suspended due to a violation of our terms of service. We take our policies seriously in order to ensure a positive and safe experience for all of our users.

We understand that this may have been an unintentional mistake on your part, and we would like to provide you with an opportunity to appeal this decision. If you believe that your account has been suspended in error, please submit an appeal by clicking on the “Submit” button below.

Submit [link removed]

Please note that the review process can take up to [insert time frame] to complete. We appreciate your patience and cooperation in this matter.

If your appeal is successful, your account will be reinstated and you will be able to resume using our platform. If your appeal is not successful, your account will remain suspended.

Thank you for your understanding and for your commitment to our policies.

Best regards, Facebook Team