Is 32665 a real Facebook text or a scam?

Enter a 32665 login code only on the Facebook screen you opened.

Real Facebook SMS from this code delivers the one-time number for a login, password reset, or two-factor prompt. The text is not the place to argue your case or prove your identity to a person.

Text OTP to 32665 only when you need Facebook's temporary password.

Meta documents that command for Facebook texts. It returns a six-character temporary password that expires after 20 minutes, which is different from the six-digit confirmation code shown during a normal login.

Text HELP to 32665 to test the Facebook SMS command channel.

A real command reply comes back in the same short-code thread and identifies the Facebook SMS service. Use that when you want to confirm the thread itself, not when a stranger is rushing you for a code.

Text STOP or START to 32665 to control Facebook texts on that phone.

STOP turns off Facebook texts to that number. START turns them back on. Do not send either command because a caller tells you it will save your account.

Leave an unrequested 32665 code unused.

The text can be genuine even when you did nothing. It means someone put your phone number into a Facebook login, reset, or verification flow, by mistake or on purpose.

Read 32665 account notices as one-way alerts.

Real traffic from this code gives codes, command replies, and account-text confirmations. It does not turn into a live Meta support worker, a Marketplace buyer verification ritual, or a payment dispute.

Stop the chat when anyone asks you to send them the 32665 code.

This is the Facebook-specific theft move. A Marketplace buyer says they need to prove you are real, a locked-out friend says the code came to your phone by mistake, or a fake Meta support account says it must “verify ownership.” They are trying to finish a login with your code.

Reject a Facebook alert sent from a normal mobile number.

In the U.S., Facebook’s real SMS short code is 32665. A 10-digit sender that starts with “Meta Alert” or “Facebook Security” is not the same sender, even if the wording copies a real login-code text.

Leave links that wrap extra words around facebook.com.

Impersonations use shapes like facebook.com.login-review.net, meta-business-help.co, or facebook-security-check.com. The brand name is bait. The controlling domain is the part after the last real dot before the slash.

Treat Page-deletion countdowns as phishing, not 32665 behavior.

Real one-time codes expire. Fake Page warnings threaten to delete your profile, disable ads, or close Business Manager unless you verify through a link in 15 minutes.

Refuse any recovery step that asks for a selfie with your ID.

Fake Facebook appeals ask for a driver’s license photo, a selfie holding the license, a card number for ad billing, or your account email and password on one form. A 32665 verification text does not collect documents by SMS.

Close any screen-share request tied to a Facebook code.

The scammer wants to watch you type the code, approve a login, or open the security screen while they guide you. Facebook does not need to see your screen to process a code it sent.

Refuse any unlock fee after a Facebook code text.

Fake Meta Business messages pair a real-looking security scare with a small payment, card recheck, or ad-balance settlement. A genuine 32665 code is for authentication, not a bill.

Do not answer a call that arrives right after a 32665 code.

That timing is the setup. The caller says they are Facebook, Meta, or a buyer from Marketplace and asks you to read the number before it expires.

Open Facebook yourself, not the text link.

Use the Facebook app or type https://www.facebook.com/ directly. Check your notifications and account screens from there, because a phishing link can copy the blue Facebook page well enough to fool tired eyes.

Use the code only on the Facebook page or app screen you opened.

If you were logging in, resetting a password, or setting up two-factor authentication, enter it there. If no Facebook screen asked for it, do not paste it anywhere and do not read it to anyone.

Change your Facebook password if you did not ask for the code.

Do it after opening Facebook directly. A surprise 32665 code means your phone number was tried in a login or reset flow, so assume the next move is someone asking you to “confirm” the number.

Remove unknown Facebook sessions before you relax.

Check where your account is logged in and sign out devices you do not recognize. Look for old phones, browsers in cities you do not use, and sessions created around the time the code arrived.

Text HELP to 32665 from the same thread if the SMS itself looks wrong.

Meta publishes 32665 for Facebook texts and SMS commands, including HELP, STOP, START, and OTP. Text STOP to 32665 only if you want Facebook texts to stop on that number.

Report the person who asked for the code inside Facebook.

Use the report option on the profile, Page, Marketplace listing, or message thread that requested it. Include the exact wording, the time the 32665 text arrived, and whether you sent the code.