We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other Meta entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster.

We do not allow:

Attempts to compromise or access accounts via unauthorized means, including:

Accessing accounts, profiles, or other Meta entities other than one’s own through deceptive means or without explicit permission from the account, profile, or entity owner.
Obtaining, acquiring or requesting another user’s login information, personal information, or other sensitive user information for the purpose of unauthorized access, including through the following tactics:
- Phishing, defined as the practice of creating communications or websites that are designed to look like more trusted or reputable communications or websites for the purpose of fraudulently acquiring sensitive user information.
- Social Engineering, such as repeated or consistent attempts to harvest or acquire the answers to common account or password recovery questions.
- Malware, Greyware, Spyware or other malicious code, as described below.

Attempts to share, develop, host, or distribute malicious or harmful code, including:

Encouraging or deceiving users to download or run files, apps, or programs that will compromise a user’s online or data security, including, but not limited to:
- Malware, defined as code or software designed to harm or gain unauthorized access to systems. This includes programs designed to harm computer systems, as well as software designed to extract money from victims, like ransomware.
- Spyware, defined as code or software that collects data on users and sends it to third parties without the informed consent of the user, or that uses the data for illicit purposes (e.g., sextortion, blackmail, illicit access to systems).
- Greyware, defined as code or software which detracts from the use of hardware or software and may be difficult to remove from a computer system or network.

Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
Sharing or advertising software or products that enable people to circumvent security systems, including software that encourages hacking of software, passwords, or credentials
Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on our services violate the spam or cybersecurity sections of the Community Standards.

User experiences

See some examples of what enforcement looks like for people on Facebook, such as: what it looks like to report something you don’t think should be on Facebook, to be told you’ve violated our Community Standards and to see a warning screen over certain content.

Note: We’re always improving, so what you see here may be slightly outdated compared to what we currently use.

USER EXPERIENCE

Reporting

USER EXPERIENCE

Post-report communication

USER EXPERIENCE

Takedown experience

USER EXPERIENCE

Warning screens

Reporting

1 Universal entry point

We have an option to report, whether it's on a post, comment, story, message, profile or something else.

2 Get started

We help people report things that they don’t think should be on our platform.

3 Select a problem

We ask people to tell us more about what’s wrong. This helps us send the report to the right place.

4 Check your report

Make sure the details are correct before you click Submit. It’s important that the problem selected truly reflects what was posted.

5 Report submitted

After these steps, we submit the report. We also lay out what people should expect next.

6 More options

We remove things if they go against our Community Standards, but you can also Unfollow, Block or Unfriend to avoid seeing posts in future.

Post-report communication

1 Update via notifications

After we’ve reviewed the report, we’ll send the reporting user a notification.

2 More detail in the Support Inbox

We’ll share more details about our review decision in the Support Inbox. We’ll notify people that this information is there and send them a link to it.