Phishing page support-service-portal.vercel.app impersonates Meta Accounts Center
@TheThreatWire posted a phishing alert on X on 2 November 2026 for support-service-portal.vercel.app/accounts-center, a page imitating Meta Accounts Center and Meta Verified. Meta does not operate it.
- First reported
- Reports
- 1
Source: x.com · published
What happened
Threat-intel account @TheThreatWire posted a phishing alert on X on 2 November 2026 for hxxps://support-service-portal.vercel.app/accounts-center. According to the post, the page targets Meta Platforms' Accounts Center and Meta Verified, the tools used to manage Facebook and Instagram accounts, subscriptions, verified badges and identity checks. The page is hosted on Vercel, a legitimate hosting platform that scammers can use for their own pages. Meta does not operate this address.
How the scam works
The screenshot in the post shows a page headed “Meta Verified: Strengthening Your Digital Identity”. It says the account has met the conditions to proceed with verification, shows a case reference, lists a short “Verification Process Overview” and ends with a blue “Start Verification” button. Its footer carries Meta's name and links such as Help Center and Privacy.
The design is meant to feel like a routine support case. Facebook and Instagram page owners are used to being told their account is eligible for a badge, restricted or under review, so a message with a case number looks credible. The warnings on the page that requests must contain valid contact information and that cases inactive for several days will be removed add pressure to act quickly.
The post does not show what happens after the button is clicked. Pages of this kind usually lead to forms that ask for the account's login, a phone number, a copy of an identity document or a one-time code, which lets the scammers take over the account, ask the owner's followers for money or lock the owner out. Verification and appeal requests belong inside the official apps or the real Accounts Center. A web address on a general hosting service is not Meta's.
Source
@TheThreatWire on X, Phishing Alert #87 of 2 November 2026 (text and screenshot). Not independently verified by scammers.com.
Red flags
- A “Meta Verified” page on a vercel.app address instead of a Meta domain.
- A case reference and process overview used to look like official support.
- A “Start Verification” button that leads away from the official apps.
- Warnings that cases will be cancelled or removed if you do not respond.
- A message saying your account has met the conditions for verification that you did not request.
If you were targeted
- 1Do not click Start Verification or enter details on support-service-portal.vercel.app.
- 2Manage verification and appeals only inside the official Facebook or Instagram apps or at accountscenter.meta.com.
- 3If you entered a password or code, change your password and review login sessions in Accounts Center.
- 4Turn on two-factor authentication using an authenticator app.
- 5Report the page to Meta through the app and to the hosting provider.