The growing craze for verified social media accounts is now becoming a serious cybersecurity threat for users of Facebook. A new online scam promising free “Blue Tick” verification is reportedly targeting thousands of people and stealing access to their accounts through sophisticated phishing techniques.

Cybersecurity researchers have warned that what appears to be an easy shortcut to gaining credibility and visibility on social media may actually be a carefully designed trap to steal personal information, login credentials, and even full control of accounts.

According to security experts, the scam has already affected tens of thousands of users globally and continues spreading rapidly through fake emails, misleading alerts, and fraudulent verification messages.

‘AccountDumpling’ Scam Raises Major Security Concerns

Cybersecurity firm Guard.io recently identified the large-scale phishing operation, which researchers have reportedly named “AccountDumpling.”

Experts claim that nearly 30,000 accounts have already been compromised through this scam campaign.

Security researcher Shaked Chen stated that the attack is spreading quickly and appears to be highly organized. Investigators suspect that a cybercrime group operating from Vietnam may be behind the operation.

According to analysts, the hackers are mainly targeting accounts with monetization potential, including creators, influencers, business pages, and users with larger audiences. Once stolen, these accounts are allegedly sold on underground digital marketplaces.

How Hackers Make the Scam Look Genuine

One of the most dangerous aspects of the scam is how authentic the phishing messages appear.

Researchers say scammers are reportedly abusing platforms like Google AppSheet to send professional-looking phishing emails. Because these messages originate from trusted systems, many spam filters fail to detect them as suspicious.

The fake emails and notifications often resemble official Meta verification messages, making it difficult for ordinary users to identify the fraud.

Experts also claim hackers are using advanced evasion techniques such as invisible characters and hidden formatting tricks to bypass security scans and email protection systems.

How Users Are Being Tricked

Victims reportedly receive alarming notifications claiming:

• Their Facebook account could be deleted
• A copyright violation complaint has been filed
• Their page is at risk of suspension
• They are eligible for a free Blue Tick verification without subscription fees

These messages usually create urgency and pressure users to act quickly.

Once users click on the provided link, they are redirected to fake login pages or fraudulent CAPTCHA verification screens designed to look official.

At this stage, victims unknowingly submit:

• Facebook usernames
• Passwords
• Two-factor authentication (2FA) codes
• Recovery information

As soon as the information is entered, hackers reportedly gain full access to the account and may immediately lock out the original owner.

Why Blue Tick Verification Scams Are Increasing

Verified accounts have become highly valuable on social media because they are associated with credibility, influence, and authenticity.

Many users, creators, and businesses want the Blue Tick badge to improve visibility and build trust online. Cybercriminals are exploiting this demand by offering fake “free verification” opportunities.

Security experts warn that legitimate verification processes are handled only through official Meta systems and not through random emails, links, or direct messages.

Important Tips to Stay Safe Online

Cybersecurity professionals are advising users to remain extremely cautious while interacting with any verification-related messages.

Here are some important safety measures:

Avoid Clicking Unknown Links

Do not open suspicious links received through email, messages, or social media notifications, especially those promising instant account verification.

Verify Through Official Channels

Always confirm account-related alerts directly through official Meta or Facebook settings instead of relying on third-party messages.

Never Share Login Credentials

Legitimate companies never ask users to share passwords or 2FA verification codes through emails or unofficial websites.

Watch for Urgency Tactics

Scammers often use fear-based messages such as “Your account will be deleted” to force users into making rushed decisions.

Enable Strong Security Settings

Using strong passwords, enabling two-factor authentication, and regularly checking login activity can improve account security significantly.

Cybersecurity Threats Continue to Evolve

Experts say phishing attacks are becoming increasingly sophisticated as cybercriminals adopt newer technologies and more convincing methods.

Social media users are now being targeted not only through fake websites but also through realistic-looking emails, AI-generated messages, and cloned login pages.

As online scams continue evolving, digital awareness is becoming one of the most important tools for protecting personal information and social media accounts.

Authorities and cybersecurity researchers are urging users to stay alert and think carefully before responding to any message promising free benefits, urgent verification, or exclusive access online.