State AGs send letter to Meta asking it to take ‘immediate action’ on user account takeovers

MENLO PARK, Calif. (AP) — A group of 40 state attorneys general have sent a letter to Instagram and Facebook parent company Meta expressing “deep concern” over what they say is dramatic uptick of consumer complaints about account takeovers and lockouts.

The attorneys general called on Meta to do a better job preventing account takeovers — when malicious actors take a users’ accounts, lock them out by changing their passwords, and post their own material, read private messages, scam contacts and engage in other harmful or illegal behavior.

The letter asks Meta to take “immediate action to increase mitigation tactics and respond to users whose accounts have been taken over.” It also asks the Menlo Park, California-based company to provide information on the number of account takeovers over the past five years, the suspected causes of the increase in account takeovers and safeguards it has in place.

“Consumers are reporting their utter panic when they first realize they have been effectively locked out of their accounts,” says the letter dated March 5. “Users spend years building their personal and professional lives on your platforms, posting intimate thoughts, and sharing personal details, locations, and photos of family and friends. To have it taken away from them through no fault of their own can be traumatizing.”

READ MORE Social media outages hurt small businesses -- so it’s important to have a backup plan Europe’s Digital Markets Act is forcing tech giants to make changes. Here’s what that will look like Meta attorneys ask judge to dismiss shareholder suit alleging failure to address human trafficking

Even worse, the letter says, the takeovers pose a significant financial risk to users, who may be running businesses or have credit card information linked to their social media accounts.

In a statement, Meta said scammers are constantly adapting to evade crackdowns.

“We invest heavily in our trained enforcement and review teams and have specialized detection tools to identify compromised accounts and other fraudulent activity,” the company said. “We regularly share tips and tools people can use to protect themselves, provide a means to report potential violations, work with law enforcement and take legal action.”