Of all the ways people lose a Facebook page, the Business Manager invite remains the most effective. It has been running for years, it has evolved into several versions, and it keeps working because it uses a real Facebook feature rather than a fake one.
What Business Manager actually is
Business Manager is a legitimate tool that lets a company organise its pages, ad accounts and the people who work on them. Access can be shared between businesses, which is exactly what makes it useful to a scammer. Nothing in the process is forged. The notification you receive is genuine. Only the intent behind it is not.
How the scam runs
You receive an approach, often an offer to buy the page or to run a paid campaign on it. At some point you are asked to accept a Business Manager request, or to add an email address as an admin, or to confirm a notification that looks administrative and harmless.
Once their business has the right level of access to the page, they remove you. The page is then held inside an account you cannot reach. Because the transfer used a legitimate mechanism and you clicked accept, recovering it is extremely difficult.
The variants worth recognising
- A buyer who needs access “to verify the page is real” before paying.
- An advertiser who needs to add the page to their Business Manager “to run the campaign”.
- A message dressed up as a platform notification about a policy or verification step.
- A partnership or collaboration offer that requires you to accept an invite first.
The rule that prevents all of it
Nobody needs access to your page before paying you. Not to verify it, not to value it, not to prepare a campaign. A genuine buyer works through escrow or a screened middleman and expects the access to move after the money does. If someone needs access first, the access is what they came for.
Other precautions
Keep two factor authentication on the personal account that owns the page. Review the people and businesses with page access periodically and remove anything you do not recognise. Treat administrative looking notifications with the same suspicion as email, because the request inside them may have been initiated by anyone.
If it has already happened
Report it immediately rather than waiting, and see our guide on reporting a hacked page. Recovery is rare, and it is much rarer after a delay.
Thinking of selling?
We give free valuations with no obligation. Send us the page URL and a representative replies with a figure, usually within one business day. Looking to buy instead? Register as a buyer.
