Its very simple security solutions that they could implement to fix these issues or pay a few dozen people to be the "live support" that is currently nonexistent.
1. Your email is required.
2. A phone number is required.
3. Authentication code required.
Solutions:
1. If someone is attempting to login from an IP address that has never been seen before, all 3 above are required.
2. If someone is attempting to change your email, then #2 and #3 above are required.
3. If someone is attempting to change your phone number, then #1 and #3 are required.
My mom lost her account and tracking what she clicked, history, etc. proved futile. You would think that a "billion dollar corporation", Meta (Facebook), would have better security features and measures as they seem to pride themselves on which is all just bullsh*t.
I'd made all efforts but was unsuccessful.
My stepfather passed away from COVID-19 in early 2022 and my mom had less than a hundred friends on her account, some who have passed away, but she visits their wall to keep their memory alive every so often, with him being one of them, so she would memorialize his Facebook page by posting on it and making herself feel better. It was heartbreaking when I had to tell my 70 year old mother she wasn't going to be able to do this anymore.
This person then started posting things for sale on her account and taking photos of what looked like their own home. Quite unclear why they would even do this. And I messaged them, only to be blocked. And it was only after I rallied enough of her friends to keep reporting the account that Facebook finally removed it.
My father also had his Facebook account recently hacked, but we got it in time and changed the password. It must be something with older people clicking random things that are stealing their passwords.
As for my own lessons... learned from them... the best thing to do is to enable Google Authenticator or another similar app, which seems to be superior to the SMS method for some reason. Just be weary about what you click, but you aren't alone... this is probably happening to a few thousand people a day.
And the only thing Zuckerberg is interested in, is his Metaverse. Can't wait for that to be hacked.. maybe then he'll finally do something.