Business account hacked

[TheHighlander]

Good Evening All

Looking for some advice

Our Facebook Business Page has our Business Bank Card details linked to it for paying for adverts etc

My wife and I are the only 2 with access to this.

My wifes personal FB account got accessed by a foreign named person, she managed to get the account back, change the password and all was fine, they added a load of random folks/pages which she removed.

Fast forward to now and my business bank statement came in today, Facebook on a daily basis pretty much have been taking money for adverts from our account - It adds up to around £6-700.

I have checked our business page and we have only spent £100 or so this year, I checked my payment account on FB Pages and there are near £800 transactions with a mix of failed transactions

Called the Bank of Scotland who said we need to speak to Facebook, the number they gave me was 0844 3069178 which is non active, FB don't have a UK support number only an online chat, spoke to them for over 1hr they confirmed someone with a foreign named added themselves to my wifes payment account and has been paying for posts in Spanish for watches/foundation (We run a Travel Agency in Scotland)

I asked them to confirm this is fraud and they have come back and advised it is one of our employees to which we don't have (the profile and name added hold NO information just a google stock image) they have been no help and said they will investigate and get back to me, they refused to call me stating they were on another line, I asked for a call back when they are ready and was told NO. I wasn't rude just stated facts and they cut me off the chat, emailed me to say they will investigate and get back to me.

Now back to the Bank - They have said they get 1 chance at a charge back and if Facebook say it's not fraud I won't get my money back.

So surely they can see we are only linked to 1 business page, only pay for ads on 1 business page. We are based in Scotland not Spain.

I'm worried we won't get the money back..... What the hell do I do?

I hope this all makes sense, typed it whilst on hold to the bank.....

[meatballs]

File a claim with the police/action fraud and keep pushing both bank and Facebook to refund the money.

I'd also review all the security settings on Facebook/emails/reset passwords etc. Potentially clean out computer and reinstall if you don't know how you were compromised.

[Lemming Train]

meatballs said:

File a claim with the police/action fraud and keep pushing both bank and Facebook to refund the money.

I'd also review all the security settings on Facebook/emails/reset passwords etc. Potentially clean out computer and reinstall if you don't know how you were compromised.

Police won't be even remotely interested. Action Fraud won't be interested unless it's 6 figures or more and they've plenty of big fish at that level to keep them busy.

[Vaud]

The probability is that:

- you have reused passwords and they gained access from a password leak not related to Facebook
- one of you clicked a link in a perfectly innocent email for Facebook and accidentally shared the details
- you have malware that has leaked the password

Don't worry - it happens to the best. A leading bank tested it's most senior execs with "test" emails and a significant number failed.

I would reinstall the operating system, change all passwords and add multifactor authentication to any apps that allow it.

[Lemming Train]

Type in your email addresses to haveibeenpwned.com and see what it says.

[meatballs]

Lemming Train said:

Police won't be even remotely interested. Action Fraud won't be interested unless it's 6 figures or more and they've plenty of big fish at that level to keep them busy.

It's not about getting them to investigate it's getting a crime number to press Facebook/bank with

[TheHighlander]

Update

I went into the bank today - They cannot understand how this happened as the person in fraud didn't understand Facebook so it made it pretty hard to explain.

Anyway they did a chargeback and I got the money back which is good, while they investigate they have said FB might request the money back.

What a pain in the arse.