DH's Facebook being constantly 'hacked'

[Hidingtonothing]

Pretty much every day atm he's getting 'someone logged into your account' emails. Log ins are all random locations (although mostly UK) and definitely not him. Emails appear to be genuine from fb but he's not clicking on any links, any action he's needed to take has been done direct from his fb account (resetting password etc) but on some occasions his actual fb account appears untouched despite emails telling him to secure his account. We're confused, does anyone know why this is happening and how we can stop it?

Where is the email from?

Has he turned on two factor authentication?

Have you looked at the email header really carefully? Check the email address it's coming from doesn't have something like a dot between the word Facebook and the .com at the end - like this - Facebook.scammy.com

It does sound like phishing but he could turn on two factor authentication if he hasn't already m.facebook.com/help/148233965247823

The emails are a scam - they want you to click on the link which enables them to connect to your computer.

I have had them too!! They are very convincing

The "Facebook" emails are likely to be phishing scams. They can look awfully legitimate.

They come from [email protected] which google says is a genuine fb address, I have suggested he turns two factor on but don't think he has as yet, not sure why Just can't understand why it keeps happening, don't think mine has ever been hacked, what's so attractive about his?!

Try this, it's an old article but might still be worth a look, apparently Facebook list all the emails they send you in your account so you can check to see if it's genuine

www.independent.co.uk/life-style/gadgets-and-tech/news/facebook-account-hacked-phishing-emails-security-feature-tools-login-a8124521.html

Tell him to: 1) login to his Facebook account, 2) go to Settings, 3) go to Security and Login, 4) scroll down to "See recent emails from Facebook". If it's there, it's legit.

My google search says it might have once been legit, but it's likely been spoofed.

[email protected] sounds like a scam address to me. Surely it would be @Facebook.com if it was legit.

Brill, will get him to check now, thanks.

Ok, DH home now and all emails are genuine. He's set up two factor authentication now so hopefully that will sort it, can anyone think of anything else he should do? Just bemused at why his account is being targeted, even he would say he's really not that interesting