If you receive a Facebook Message asking “is that you”? Do not click on the link Do not enter your Facebook User ID and Password!
How to protect yourself against phishers
Use unique and complex passwords for all of your online accounts. Password managers help you generate strong passwords and notify you when you reuse old passwords.
Use multi-factor authentication (MFA) where possible.
Beware of any messages sent to you, even from your Facebook contacts. Phishing attacks will usually employ some type of social engineering to lure you into clicking malicious links or downloading infected files.
Watch out for any suspicious activity on your Facebook or other online accounts.