Facebook can’t even control fake Mark Zuckerberg scam accounts

SAN FRANCISCO — A Facebook notification on Gary Bernhardt’s phone woke him up one night in November with incredible news: a message from Mark Zuckerberg himself, saying that he had won $750,000 in the Facebook lottery.

“I got all excited. Wouldn’t you?” said Bernhardt, 67, a retired forklift driver and Army veteran in Ham Lake, Minnesota. He stayed up until dawn trading messages with the person on the other end. To obtain his winnings, he was told, he first needed to send $200 in iTunes gift cards.

Hours later, Bernhardt bought the gift cards at a gas station and sent the redemption codes to the account that said it was Zuckerberg. But the requests for money didn’t stop. By January, Bernhardt had wired an additional $1,310 in cash, or about a third of his Social Security checks over three months.

Bernhardt eventually realized he had been the unwitting victim of a scam that has thrived on Facebook and Instagram by using the sites’ own brands — and its top executives — to lure people in.

At a time when the real Zuckerberg has vowed to clean up Facebook, the Silicon Valley company has failed to eliminate impostor accounts masquerading as him and his chief operating officer, Sheryl Sandberg, to swindle Facebook users out of thousands of dollars.

An examination by The New York Times found 205 accounts impersonating Zuckerberg and Sandberg on Facebook and its photo-sharing site Instagram, not including fan pages or satire accounts, which are permitted under the company’s rules. At least 51 of the impostor accounts, including 43 on Instagram, were lottery scams like the one that fooled Bernhardt.

The fake Zuckerbergs and faux Sandbergs have proliferated on Facebook and Instagram, despite the presence of Facebook groups that track the scams and complaints about the trick dating to at least 2010.

A day after The Times informed Facebook of its findings, the company removed all 96 impostor Mark Zuckerberg and Sheryl Sandberg accounts on its Facebook site. It had left up all but one of the 109 fakes on Instagram, but removed them after this article was published.

“Thank you so much for reporting this,” said Pete Voss, a Facebook spokesman. He could not say why Facebook had not spotted the accounts posing as its top executives, including several that appeared to have existed for more than eight years. “It’s not easy,” he said. “We want to get better.”

Facebook requires people to use their authentic name and identity. Yet the company has estimated that perhaps 3 percent of its users — as many as 60 million accounts — are fake. Some of those accounts are disguised as ordinary people, some pretend to be celebrities such as Justin Bieber.

In congressional testimony this month, Zuckerberg said Facebook was improving its software to automatically detect and remove such accounts. Facebook officials have said the company blocks millions of fake accounts trying to register each day and analysts said the social network has improved its efforts to remove the accounts.

“Fake accounts, overall, are a big issue, because that’s how a lot of the other issues that we see around fake news and foreign election interference are happening as well,” Zuckerberg told lawmakers, adding that Facebook is hiring more people to work on reviewing content.

But major holes remain. Interviews with a half-dozen recent victims — and online conversations with nine impostor accounts — showed that the Facebook lottery deception is alive and well, preying particularly on older, less educated and low-income people.

The Zuckerberg and Sandberg impostor accounts typically use the executives’ pictures as profile photos and list their Facebook titles. Some post manipulated images of people holding oversize checks. The names of Zuckerberg and Sandberg are sometimes misspelled, or use parentheses and middle names (Elliot for Zuckerberg and Kara for Sandberg) to evade Facebook’s software.

Many of the impersonators had dozens to hundreds of followers; several had thousands. They are aided by a network of other sham accounts with generic names, such as Jim Towey and Mary Gilbert, which purported to be “Facebook claim agents.”

The scammers seek victims who, based on their Facebook and Instagram profiles, seem vulnerable, said Robin Alexander van der Kieft, who manages several Facebook groups that track the scams. The various fake accounts share information about successful shakedowns and continue pouncing on those victims, he said. He has traced many of the Internet Protocol addresses of these fake accounts to Nigeria and Ghana.

The pitch often begins with an unsolicited “Hello. How are you doing?” on Facebook or Instagram. The fake accounts then proceed, sometimes in broken English, to inform people of their enormous Facebook lottery prize.

The charade has ensnared people like Donna Keithley, 50, a stay-at-home mom with four children in Martinsburg, Pennsylvania. In March 2016, an account with the name Linda Ritchey messaged Keithley “on behalf of the Facebook CEO Mark Zuckerberg” to pass on word of her good fortune: $650,000 in lottery winnings. Keithley wired $350 — a delivery fee — the next day.

That began a monthlong saga. According to a 28,000-word transcript of a Facebook Messenger conversation between Keithley and the account, the scammer repeatedly played on Keithley’s Christian faith to get her to send more money.

“Are you good Christian with god fears?” the Linda Ritchey account asked. “Can you trust me and also have believe in me?”

Over the next month, Keithley received not only Facebook messages but a call from a Zuckerberg impostor who assured her the lottery was real. She even heard from a Facebook account masquerading as Eileen M. Decker, the former U.S. attorney in Los Angeles, asking for $205 to process her winnings.

The Times found at least five Facebook accounts posing as Decker and advertising government grants, another known scam. Decker told The Times that she has tried to get Facebook to remove the accounts, but the site wanted a picture of her government-issued identification to do so. She refused. “To me, they’re not a trusted source,” she said. She added that she had contacted the FBI and hired a lawyer.

Bernhardt said that since he wired his last payment to the Zuckerberg masquerader in January, he has heard from two other Mark Zuckerbergs, one Sheryl Sandberg and other accounts promising him winnings in return for more cash.

No conversations have gone as deep as with his original scammer. “I thought we were getting real close,” Bernhardt said. “He started calling me Mr. Gary and I started calling him Mr. Mark.”

He said he had told his scammer about growing up in a foster home and his dream of owning a house on a lake.

“They sucked me in because they knew my dreams.”

Comments

comments