TLDR
Job seekers are being targeted by fake Calendly booking pages that impersonate Meta (Facebook) recruiters. The pages copy a real Calendly scheduling flow, then push victims through forged Facebook and Google login screens that harvest...
How it works
Job seekers are being targeted by fake Calendly booking pages that impersonate Meta (Facebook) recruiters. The pages copy a real Calendly scheduling flow, then push victims through forged Facebook and Google login screens that harvest...
Red flags
- You receive an unsolicited Calendly interview link for Meta (or any dream employer) you never applied to, often after a long job hunt. The page asks you to "sign in to Facebook" or Google as part of the interview, or demands your authenticator code, SMS code, or phone tap. A fake address bar appears over the page, error messages look scripted, and the recruiter rushes you with a "hear back within 90 minutes" promise. What to do Never enter Facebook, Google, or Microsoft passwords on a page reached from a Calendly link
- legitimate recruiters never need them. If you already typed a password or approved a prompt, immediately reset it from a clean device, revoke active logins, and remove suspicious app authorizations. Report the link to Meta, Google, and your job platform, and warn anyone else
What to do
- 1Red flags You receive an unsolicited Calendly interview link for Meta (or any dream employer) you never applied to, often after a long job hunt.
- 2What to do Never enter Facebook, Google, or Microsoft passwords on a page reached from a Calendly link; legitimate recruiters never need them.
- 3Report the link to Meta, Google, and your job platform, and warn anyone else
Source
malwarebytes
Source reviewed by Mythos Forensic Team
https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-calendly-meta-careers-pages-steal-facebook-and-google-loginsFAQ
Is Fake Calendly Meta interview pages steal Facebook and Google logins including 2FA codes a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
You receive an unsolicited Calendly interview link for Meta (or any dream employer) you never applied to, often after a long job hunt. The page asks you to "sign in to Facebook" or Google as part of the interview, or demands your authenticator code, SMS code, or phone tap. A fake address bar appears over the page, error messages look scripted, and the recruiter rushes you with a "hear back within 90 minutes" promise. What to do Never enter Facebook, Google, or Microsoft passwords on a page reached from a Calendly link; legitimate recruiters never need them. If you already typed a password or approved a prompt, immediately reset it from a clean device, revoke active logins, and remove suspicious app authorizations. Report the link to Meta, Google, and your job platform, and warn anyone else
What should I do first?
Red flags You receive an unsolicited Calendly interview link for Meta (or any dream employer) you never applied to, often after a long job hunt.; What to do Never enter Facebook, Google, or Microsoft passwords on a page reached from a Calendly link; legitimate recruiters never need them.; Report the link to Meta, Google, and your job platform, and warn anyone else
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.