Hacker News Reader

Comment by Flankk | Hacker News Reader

The reason I ask is because Facebook phishing attacks are common. I am confused how an attacker was able to steal money from you when you have two-factor authentication enabled. In any case, if your account ends up being disabled there will be a link to download your information. Good luck.

View on HN

Thank you. I know, I am confused (and VERY concerned!) by the fact I had 2FA and they managed to get into my account and somehow stole money out of my bank account! It's made me very suspicious now of so much!

Sometimes the "download your information" option is there, but when I click on it just says an error.

Could you confirm if the purchase was made through Facebook Marketplace, or if they got your card details and somehow made the purchase elsewhere?

My question above assumes that the purchase was on Marketplace.

I really don't know, but it was definitely on FB. The transaction on my bank statement was "FACEBK" followed by a reference with numbers and letters.

I did search for what it might be and it seemed from other people's experiences it might be some kind of FB advertising? Certainly nothing to do with me! I was really upset and so relieved that my bank helped me sort it out.

I will just add that my FB account was suspended on 13th Dec and on 15th Dec I saw £200 'pending' out of my bank account with the "FACEBK" ref thing which I reported it to my bank straight away that night. Sadly on the morning of 16th Dec it went out of my account, but my bank sorted it for me very swiftly later that day.

To my mind the fraud people probably poisoned your account in the hope that you would be locked out of FB and wouldn't notice the transaction.

Reply on news.ycombinator.com