Loading story…
Meta reported separate enforcement actions against coordinated abuse on its platforms, including the takedown of more than 150,000 accounts tied to scam compounds in Southeast Asia and the removal of about 300 accounts and pages linked to an Iranian influence operation targeting U.S. Instagram users. The scam-related action was conducted with international law enforcement and was associated with the arrest of 21 alleged fraudsters, underscoring a broader campaign to dismantle industrialized online fraud networks operating from regional scam hubs.
Meta said the Iranian operation used fake personas, AI-generated profile images, fabricated occupations, and layered amplification accounts to build credibility with English-speaking U.S. audiences before introducing political messaging, particularly content critical of Israel and U.S. policy in the Middle East. The company said the network had limited real-world traction despite roughly 41,000 followers across the Instagram personas, while the scam crackdown was paired with new fraud-detection features across Facebook, Messenger, and WhatsApp. A separate report about an Instagram outage described service disruption and backend failure speculation, but it was not part of the same security event.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
7 events from the most recent confirmed update back to the earliest known activity.
Meta announced new scam detection tools for Facebook, Messenger, and WhatsApp, saying its AI systems analyze text, images, and contextual signals to identify sophisticated fraud patterns at scale.
The same anti-scam operation resulted in the arrest of 21 alleged fraudsters, which Meta cited as evidence that coordinated information sharing can disrupt scam centers.
In a joint operation with international law enforcement, Meta deactivated more than 150,000 accounts linked to major scam centers across Southeast Asia.
Before the network gained a large following, Meta removed roughly 300 Facebook and Instagram accounts and pages associated with the operation; the Instagram personas had about 41,000 followers but little authentic engagement.
Meta said it detected and disrupted the coordinated Iran-linked operation late in 2025 based on coordinated behavior and links to previously identified Iranian campaigns.
Meta said the influence operation expanded to Facebook and Instagram in summer 2025, where it used fake journalist and commentator personas, AI-generated profile photos, and amplifying accounts.
Meta assessed that an Iran-linked influence operation started on X in 2024, using fake personas and coordinated behavior to target English-speaking U.S. audiences.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourcetherecord.media
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Meta announced new anti-scam protections across **Facebook, Messenger, and WhatsApp** as it faces growing scrutiny over fraud on its platforms. The company said its AI systems now analyze **text, images, and contextual signals** to detect celebrity and brand impersonation, deceptive links, domain spoofing, and other social-engineering tactics. New measures include Facebook warnings for suspicious friend requests, WhatsApp alerts for risky device-linking attempts involving QR codes or phone-number entry, and expanded Messenger scam detection that can, with user consent, review recent chats for fraud indicators. Meta also detailed privacy-focused link protection in Messenger through **Advanced Browsing Protection**, which checks shared URLs against a large malicious-site watchlist without exposing readable links to Meta. The product rollout follows a broader crackdown on industrialized scam operations, including joint action with the **Royal Thai Police**, **FBI**, **UK National Crime Agency**, and **Australian Federal Police** that led to **21 arrests** and the disabling of more than **150,000 accounts** tied to Southeast Asian scam compounds. Meta said it removed **159 million scam ads in 2025** and took down about **10.9 million Facebook and Instagram accounts** linked to criminal scam centers, while shifting from deleting individual accounts to disrupting entire networks. The push comes as researchers separately documented a large malvertising operation using **300+ paid Meta ad campaigns** to impersonate news outlets and public figures, lure victims to spoofed sites, harvest contact details, and funnel them into call-center-run investment scams across at least **25 countries**.
Jun 29, 2026
**Meta** introduced new anti-scam protections across *WhatsApp*, *Facebook*, and *Messenger* to counter fraud campaigns that rely on social engineering, impersonation, and malicious links. The updates include WhatsApp warnings when device-linking requests show scam-related behavioral signals, such as attempts to trick users into sharing linking codes or QR codes, and Facebook alerts for suspicious friend requests from accounts with indicators like recent creation or no mutual connections. Messenger is also adding AI-driven scam detection to identify patterns associated with impersonation and spoofed links in chats. The changes are part of a broader anti-fraud push in which Meta said it worked with international law enforcement to disable more than **150,000 scam-linked accounts** and support the arrest of **21 individuals**. A separate report on a new cross-industry anti-scam accord involving Meta, Google, Microsoft, Amazon, OpenAI, and others describes a wider effort to share threat intelligence, improve fraud reporting, strengthen transaction verification, and coordinate defenses against scam operations that move across multiple online platforms. A report on **Operation Atlantic** focuses instead on cryptocurrency approval-phishing enforcement by U.S., U.K., and Canadian authorities and is a different story from Meta's platform-specific product rollout.
Jun 29, 2026
**Meta** said it is pursuing legal action against advertisers it alleges ran **celeb-bait scam ads** on its platforms, including defendants based in **Brazil, China, and Vietnam**. Meta reported suspending the advertisers’ payment methods, disabling related accounts, and blocking domains used in the campaigns, which allegedly misused celebrity images/voices (including synthetic media) to drive victims to scam sites that harvest sensitive data or solicit money via fraudulent products and investment schemes; Meta also said it sent cease-and-desist letters to marketing consultants promoting services to bypass ad-policy enforcement (e.g., “un-ban” services and renting access to trusted accounts). Separately, a **Revolut** report on **Authorised Push Payment (APP) fraud** found scam origination increasingly tied to encrypted/direct messaging channels, with **Telegram** exceeding **20%** of reported scam origination and showing significant growth versus 2024, while **Meta-owned platforms** collectively remained the largest source at **44%**. The report highlighted category concentration by platform, including Telegram and WhatsApp accounting for major shares of **investment** and **job scams** (with Telegram cited as over **58%** of job scams), reinforcing that a large portion of financial fraud is initiated on social and messaging platforms and prompting calls for stronger platform accountability.
Jun 29, 2026