정책 상세 정보
변경 사항
오늘
정책 근거
저희는 사용자의 안전에는 사용자가 관리할 수 있는 개인정보 계정, 프로필 및 기타 Meta 엔티티에 대한 보안과 더 넓은 범위의 저희 제품 및 서비스에 대한 보안이 포함된다는 것을 인지하고 있습니다. 사기성이 있거나 다른 사람의 권리를 침해하는 방법으로 민감한 개인정보를 수집하거나 무단으로 액세스하려는 시도는 저희가 목표로 하는 신뢰할 수 있고 개방적이며 안전한 사용 환경을 해칩니다.
허용되지 않는 내용:
다음을 포함하여 승인되지 않은 수단으로 계정을 해킹하거나 계정에 액세스하려는 시도:
- 기만적인 방법을 사용하거나 계정, 프로필, 항목 소유자의 명시적인 허락 없이 본인의 소유가 아닌 계정, 프로필, 기타 Meta 엔티티에 액세스하는 행위
- 다음과 같은 전술을 통해 무단 액세스를 위해 다른 사용자의 로그인 정보, 개인정보 또는 기타 민감한 사용자 정보를 획득, 수집 또는 요청하는 행위:
- 피싱(사기성 있는 부정한 방법으로 민감한 사용자 정보를 습득하기 위해 신뢰할 수 있거나 평판이 좋은 커뮤니케이션 또는 웹사이트처럼 보이도록 설계된 커뮤니케이션 또는 웹사이트를 만드는 행위)
- 소셜 엔지니어링(예: 자주 묻는 질문이나 비밀번호 복구 질문에 대한 답변을 수집하거나 얻으려는 반복적이거나 일관된 시도)
- 아래 설명된 맬웨어, 그레이웨어, 스파이웨어 또는 기타 악성 코드
다음을 포함하여 악의적이거나 유해한 코드를 공유, 개발, 호스팅 또는 배포하려는 시도:
- 다음을 포함하여 이에 국한되지 않는 사용자의 온라인 또는 데이터 보안을 침해하는 파일, 앱 또는 프로그램을 다운로드하거나 실행하도록 사용자를 유도하거나 속이는 행위:
- 악성 코드(시스템에 위해를 끼치거나 무단으로 액세스하도록 설계된 코드 또는 소프트웨어로 정의됨). 여기에는 컴퓨터 시스템을 손상하도록 설계된 프로그램과 피해자로부터 금전을 갈취하도록 설계된 소프트웨어(예: 랜섬웨어)가 포함됩니다.
- 스파이웨어(사용자에 대한 데이터를 수집하여 사용자의 동의 없이 제3자에게 전송하거나 불법적인 목적(예: 비육체적 강압에 의한 성 착취, 협박, 불법적인 시스템 액세스)을 위해 데이터를 사용하는 코드 또는 소프트웨어로 정의됨)
- 그레이웨어(하드웨어 또는 소프트웨어 사용을 저해하며 컴퓨터 시스템 또는 네트워크에서 제거하기 어려운 코드 또는 소프트웨어로 정의됨)
- 플랫폼 안팎에서 사용자, 제품, 서비스를 위험에 빠뜨리는 브라우저 확장과 모바일 애플리케이션을 비롯한 악의적인 소프트웨어를 생성, 공유 또는 호스팅
- 해킹을 협박, 인정 또는 지원하는 행위 - 여기에는 보안 시스템을 우회할 수 있도록 하는 소프트웨어, 강좌 또는 제품을 공유하거나 광고하는 행위(소프트웨어나 자격 증명 해킹을 조장하는 소프트웨어 포함)가 포함됩니다.
- 저희 서비스의 대다수 링크가 커뮤니티 규정의 스팸 또는 사이버 보안 조항을 위반하도록 악성 링크를 사용 설정하는 웹 호스팅 서비스, 도메인 이름 시스템 서버, 광고 네트워크 등 온라인 인프라 제공
2025. 6. 26.
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other Meta entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster.
We do not allow:
Attempts to compromise or access accounts via unauthorized means, including:
- Accessing accounts, profiles, or other Meta entities other than one’s own through deceptive means or without explicit permission from the account, profile, or entity owner.
- Obtaining, acquiring or requesting another user’s login information, personal information, or other sensitive user information for the purpose of unauthorized access, including through the following tactics:
- Phishing, defined as the practice of creating communications or websites that are designed to look like more trusted or reputable communications or websites for the purpose of fraudulently acquiring sensitive user information.
- Social Engineering, such as repeated or consistent attempts to harvest or acquire the answers to common account or password recovery questions.
- Malware, Greyware, Spyware or other malicious code, as described below.
Attempts to share, develop, host, or distribute malicious or harmful code, including:
- Encouraging or deceiving users to download or run files, apps, or programs that will compromise a user’s online or data security, including, but not limited to:
- Malware, defined as code or software designed to harm or gain unauthorized access to systems. This includes programs designed to harm computer systems, as well as software designed to extract money from victims, like ransomware.
- Spyware, defined as code or software that collects data on users and sends it to third parties without the informed consent of the user, or that uses the data for illicit purposes (e.g., sextortion, blackmail, illicit access to systems).
- Greyware, defined as code or software which detracts from the use of hardware or software and may be difficult to remove from a computer system or network.
- Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
- Threatening, admitting to, or enabling hacking - Including by
Ssharing or advertising software, courses, or products that enable people to circumvent security systems, including software that encourages hacking of software, passwords,or credentials - Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on our services violate the spam or cybersecurity sections of the Community Standards.
This policy has been updated to reflect the consolidation of all existing policies related to malicious hacking under the Cybersecurity policy.
2024. 10. 2.
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other FacebookMeta entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster.
We do not allow:
Attempts to compromise or access accounts via unauthorized means, including:
- Accessing accounts, profiles, or other Meta
, Inc.,entities other than one’s own through deceptive means or without explicit permission from the account, profile, or entity owner. - Obtaining, acquiring or requesting another user’s login information, personal information, or other sensitive user information for the purpose of unauthorized access, including through the following tactics:
- Phishing, defined as the practice of creating communications or websites that are designed to look like more trusted or reputable communications or websites for the purpose of fraudulently acquiring sensitive user information.
- Social Engineering, such as repeated or consistent attempts to harvest or acquire the answers to common account or password recovery questions.
- Malware, Greyware, Spyware or other malicious code, as described below.
Attempts to share, develop, host, or distribute malicious or harmful code, including:
- Encouraging or deceiving users to download or run files, apps, or programs that will compromise a user’s online or data security, including, but not limited to:
- Malware, defined as code or software designed to harm or gain unauthorized access to systems. This includes programs designed to harm computer systems, as well as software designed to extract money from victims, like ransomware.
- Spyware, defined as code or software that collects data on users and sends it to third parties without the informed consent of the user, or that uses the data for illicit purposes (e.g., sextortion, blackmail, illicit access to systems).
- Greyware, defined as code or software which detracts from the use of hardware or software and may be difficult to remove from a computer system or network.
- Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
- Sharing or advertising software or products that enable people to circumvent security systems, including software that encourages hacking of software, passwords, or credentials
- Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on
Facebook or Instagramour services violate the spam or cybersecurity sections of the Community Standards.
2024. 6. 26.
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other Facebook entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive userpersonalinformation or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster. Therefore, we do not allow attempts to gather sensitive user personalinformation or engage in unauthorized access through the abuse of our platform, products, or services.
Attempts to compromise or access accounts via unauthorized means, including:
- Accessing accounts, profiles, or other Meta, Inc., entities other than one’s own through deceptive means or without explicit permission from the account, profile, or entity owner.
- Obtaining, acquiring or requesting another user’s login information, personal information, or other sensitive user information for the purpose of unauthorized access, including through the following tactics:
- Phishing, defined as the practice of creating communications or websites that are designed to look like more trusted or reputable communications or websites for the purpose of fraudulently acquiring sensitive user information.
- Social Engineering, such as repeated or consistent attempts to harvest or acquire the answers to common account or password recovery questions.
- Malware, Greyware, Spyware or other malicious code, as described below.
Gaining access to accounts, profiles Facebook, Inc. entities, or user data other than your own through deceptive means or without explicit permission from the account, profile, or entity owner.Attempting to obtain, acquire or request another user’s login credentials, personal information or other sensitive data - whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites) or the use of malicious software or websites.Publicly sharing your own or others’ login information, either on platform or through a third party service.
Attempts to share, develop, host, or distribute malicious or harmful code, including:
Encouraging or deceiving users to download or run files or programs that will compromise a user’s online or data security, including through malicious software or websites. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.- Encouraging or deceiving users to download or run files, apps, or programs that will compromise a user’s online or data security, including, but not limited to:
- Malware, defined as code or software designed to harm or gain unauthorized access to systems. This includes programs designed to harm computer systems, as well as software designed to extract money from victims, like ransomware.
- Spyware, defined as code or software that collects data on users and sends it to third parties without the informed consent of the user, or that uses the data for illicit purposes (e.g., sextortion, blackmail, illicit access to systems).
- Greyware, defined as code or software which detracts from the use of hardware or software and may be difficult to remove from a computer system or network.
- Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
- Sharing or advertising software or products that enable people to circumvent security systems, including software that encourages hacking of software, passwords, or credentials
- Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the spam or cybersecurity sections of the Community Standards.
2022. 6. 30.
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other Meta entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster.
Do not:
Attempt to compromise user accounts, profiles, or other Facebook entities, abuse our products or services, gather sensitive information through deceptive means, or attempt to engage in unauthorized access, including:
- Gaining access to accounts, profiles Facebook, Inc. entities, or user data other than your own through deceptive means or without explicit permission from the account, profile, or entity owner.
- Encouraging or deceiving users to download or run files or programs that will compromise a user’s online or data security, including through malicious software or websites. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.
- Attempting to obtain, acquire or request another user’s login credentials, personal information, or other sensitive
informationdata - whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites) or the use of malicious software or websites. - Publicly sharing your own or others’ login information, either on platform or through a third party service.
- Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
- Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the spam or cybersecurity sections of the Community Standards.
We are making minor clarifications to the policy to better reflect the types of deceptive links we remove, including deceptive links that lead elsewhere on our family of apps and services.
2021. 3. 26.
Policy Rationale
We recognize that the safety of our users extends toincludes the security of their personal information and accounts and our services.accounts, profiles, and other Facebook entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster, and can be used to compromise user accounts and our services. Therefore, we do not allow attempts to gather sensitive user information through or engage in unauthorized accessthe abuse of our platform and products., and products, or services.
Do not:
Attempt to compromise user accounts, profiles, or other Facebook entities, abuse our products or services, or gather sensitive information through unauthorizeddeceptive means,, or attempt to engage in unauthorized access,defined as:including:
- Gaining access to
anyaccounts , profiles, Facebook, Inc. entities, or user data other than your ownthrough deceptive means or without explicit permission from the account, profile, or entity owner. - Encouraging or deceiving users
and entitiesto download or run files or programs that will compromise a user’s online or data security, including through malicious software or websites.. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network. - Attempting to obtain, acquire
Acquiringor requestinganother user’s login credentialsor other sensitive information, , whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites)or the use of malicious software or websites.. Attempting to obtain the sensitive information of others such as usernames, passwords, or other personal information, through deceptive means or the use of malicious software or websites.- Publicly sharing your own or others’ login information, either on platform or through a third party service.
Creating, sharing, or hosting malicious software or malicious browser extensions to compromise accounts or gain access to user data.- Creating, sharing, or hosting malicious software browser extensions and mobile applications, on or off platform that put our users or products and services at risk.
- Providing online infrastructure, including Web Hosting Services, Domain Name System servers, and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the Spam or Cybersecurity sections of the Community Standards.
2020. 12. 17.
Section 19: Cybersecurity:
Policy Rationale
We recognize that the safety of our users extends to the security of their personal information and accounts and our services. Attempts to gather sensitive personal information by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster, and can be used to compromise user accounts and our services. Therefore, we do not allow attempts to gather sensitive user information through the abuse of our platform and products.
2019. 10. 30.
Section 19: Cybersecurity (New):
Policy Rationale
We recognize that the safety of our users extends to the security of their personal information. Attempts to gather sensitive personal information by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster. Therefore, we do not allow attempts to gather sensitive user information through the abuse of our platform and products.
Do not:
Attempt to compromise user accounts or gather sensitive information through unauthorized means, defined as:
- Gaining access to any account or user data other than your own without explicit permission from the account owner.
- Encouraging or deceiving users and entities to download or run files or programs that will compromise a user’s online or data security. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.
- Acquiring or requesting another user’s login credentials, whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites).
- Attempting to obtain the sensitive information of others such as usernames, passwords, or other personal information, through deceptive means or the use of malicious software or websites.
- Publicly sharing your own or others’ login information on platform or through a third party service.
- Creating, sharing, or hosting malicious software or malicious browser extensions to compromise accounts or gain access to user data.
- Providing online infrastructure, including Web Hosting Services, Domain Name System servers, and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the Spam or Cybersecurity sections of the Community Standards.
사용자 경험
Facebook을 사용하는 사람들에게 규정이 어떻게 시행되고 있는지에 대한 몇 가지 예를 확인해보세요. 예를 들어, Facebook에서 허용되어서는 안 되는 콘텐츠 신고, 커뮤니티 규정 위반 시 받게 되는 알림, 특정 콘텐츠에 대한 경고 화면 표시가 어떻게 이뤄지는지 살펴보세요.
참고: 규정 시행은 항상 개선되고 있으므로 여기에 표시된 이전의 예들은 현재 시행되고 있는 모습과 비교하여 약간 다를 수 있습니다.
사용자 환경
신고
사용자 환경
게시물 신고 커뮤니케이션
사용자 환경
삭제 환경
사용자 환경
경고 화면
사이버 보안 관련 도움말 보기
회원님이 Facebook에서 커뮤니티 규정 위반을 확인한 경우에 취할 수 있는 조치에 대해 알아보세요.
고객 센터 방문