With Facebook Messages new style comes email scams

There was hoping this new system would not be affected by it, but the first email scam has found its way to the new Facebook Messages system. Business Insider’s Matt Rosoff notes that he received a South African promo scam message, just three days after he got his Facebook email account. That’s bad marketing already for a system that’s only in its infancy, still.
The message he received:

A few days ago it was noted on Twitter that a new Facebook feature actually encourages spamming: Morgan Stewart of Trendline Interactive describes in a blog post (with props to Alex Williams for discovering it) that there is a new option available called “Contact Importer for Pages” which allows you to import contacts into Facebook Pages to send out invitations to fans.Here’s a screenshot:

In other words, imagine your Facebook page has about 50,000 fans and you have 10,000 of their addresses, you can send a message to that group of 10,000. Spammers love these numbers and this option will be abused into infinity and beyond. A quote from the post by Morgan:

Facebook didn’t just give the keys to new and budding page admins with a slick new tool, it just handed the keys over to every opportunist and spammer in the world. In our testing, keep in mind, Trendline has 18 total fans. There are no apparent limitations on who can use this functionality. Somewhere, a Nigerian prince is thankful that his job just got easier.

I agree with Morgan, and as Matt notes in his post on Business Insider, people on Facebook are not expecting this, compared to their Hotmail and GMail accounts. So users beware of these scams popping up on your freshly activated Facebook Messages accounts!

, ,

5 thoughts on “With Facebook Messages new style comes email scams

  1. I think people may be running away with themselves here.
    The new feature on Facebook does not allow you to send mesages at all. Just an invite.
    This doesn’t appear as a message it appears as an invite, in the “requests” section (game notifications etc) of your FB profile.
    “imagine your Facebook page has about 50,000 fans and you have 10,000 of their addresses, you can send a message to that group of 10,000.” That is not the case at all…
    If you have a facebook page and have 50,000 fans you have for quite some time been able to send a message to all 50,000 of them (or segment and target your pages fans).
    The new feature allows you to import your email address list, if there are users on that list who are NOT on already fans of your page, and they are members of facebook the invite will appear in their profile in the “requests” section as a page recommendation. If they already like your page they will not get the recommendation, if they are not on facebook they will not get an email.
    I know I have tested it, I have more than one client currently using the feature. So what would you use it for? You have launched a facebook page and you want to promote it to your organisation/site membership then this is one channel available to you. Even with responsive subscribers, the uptake on these recomendations tends to be slow and small.
    I also note that FB rolls out your invites slowly, evidently looking for complaints etc

  2. Thanks for this bit of clarification Andrew. I combined these two things in this post because they’re both about Facebook Messages and about the spam issue: but if the import option only allows invites for FB pages, that’s fine. On the first issue: I’ll try to figure out how it’s possible that he got spammed on such short notice – like I said on Twitter, it seems he’s been either sloppy or this is done on purpose to put down Facebook Messages upfront.

  3. From what I know about the FB messages (and I am still waiting for my invite!! humph, pfff, tsk) you can only be messaged by someone on your whitelist
    To be whitelisted as I understand it is only possible in one of two ways:
    – They are a friend
    – You have fanned one of their pages
    The above is hearsay, until I see an account myself Im not positive about the whitelist… but I believe it to be true.
    I think the big thing here is that people do not appreciate clicking “like” gives the owner of that page the ability to send you a message anytime they like. You dont need an FB email account either, just a normal FB account (which you obviously have to be able to ‘like’ in the first place).

  4. Apologies Remy I made a mistake.
    If the email address does not exist as a user on FB then the person is indeed sent an email inviting them to join facebook. The rest all still stands I think 🙂

Leave a Reply

Your email address will not be published. Required fields are marked *