{"id":35056,"date":"2022-07-05T10:00:06","date_gmt":"2022-07-05T17:00:06","guid":{"rendered":"https:\/\/about.fb.com\/?p=35056"},"modified":"2024-12-11T06:14:18","modified_gmt":"2024-12-11T14:14:18","slug":"how-meta-safeguards-people-against-clone-sites","status":"publish","type":"post","link":"https:\/\/about.fb.com\/news\/2022\/07\/how-meta-safeguards-people-against-clone-sites\/","title":{"rendered":"How We Work to Safeguard People Against Clone Sites"},"content":{"rendered":"

Over the past year, we\u2019ve shared a number of updates on the work of our External Data Misuse (EDM) and legal teams to <\/span>combat unauthorized data scraping<\/span><\/a> across our services. Today, we\u2019re sharing an update on clone sites \u2014 what they are and the risks they carry, how our teams are working to address them and ways you can protect your data. We also announced litigation<\/a> targeting clone sites and scraping for-hire services.<\/span><\/p>\n

What Is a Clone Site?<\/h2>\n

A clone site is a third-party site that duplicates, in whole or in part, the content of an existing site. Among other things, clone sites can be used to display people\u2019s scraped data, scam people, and damage the credibility of the original site.<\/span><\/p>\n

One of the ways clone sites are able to compile people\u2019s data is through the use of self-compromised accounts. A common way this happens is when people provide their Facebook or Instagram credentials to websites and apps offering <\/span>free likes, followers or other promises in exchange for their Facebook or Instagram credentials<\/span><\/a>. None of the services are authorized, affiliated with or endorsed by Meta.<\/span><\/p>\n

People should never provide their Facebook or Instagram password <\/span>anywhere<\/span><\/a> online outside of logging in through the official Facebook or Instagram website and apps or through the \u201cLogin with Facebook\u201d button that we allow authorized third-party developers to provide on their site.\u00a0<\/span><\/p>\n

Taking Action Against Unauthorized Scraping and Clone Sites<\/h2>\n

In the first half of 2021, we tracked over 100 different Instagram clone sites. By mid-year, through our disruption efforts, the known clone site ecosystem was reduced by approximately 90%.<\/span><\/p>\n

In 2020, <\/span>we filed an action<\/span><\/a> against a defendant scraping people\u2019s publicly-visible information from Instagram in order to create a network of clone sites. This was a violation of our Terms of Service and we filed a lawsuit in order to protect our users. The Court recently issued a final judgment in our favor and found Defendant liable for scraping data from Instagram users and republishing it on his clones sites. The Defendant was ordered by the Court to pay over $200,000 and is banned from using Facebook or Instagram. This decision will help protect people and send a message that this conduct is not tolerated by Meta.<\/span><\/p>\n

We continue to take action against unauthorized scraping and clone sites. Today, <\/span>we filed a lawsuit<\/span><\/a> in Northern California to enforce our Terms of Use. Operating under the name \u201cMyStalk,\u201d the defendant Ekrem Ate\u015f used unauthorized automation software to improperly access and collect \u2014 or \u201cscrape\u201d \u2014 the profiles of Instagram users.\u00a0<\/span><\/p>\n

MyStalk\u2019s software used thousands of automated Instagram accounts that falsely identified themselves as legitimate Instagram users connected to either the official Instagram mobile application or website. Through this fraudulent connection, the Defendant scraped data from the profiles of over 350,000 Instagram users and collected posts, photos, Stories, and profile information. These profiles had not been set to private by the users and, beyond a limited number of profiles and posts, were publicly viewable only to logged-in Instagram users. Defendant published the scraped data on his own websites, which display user data scraped from Instagram.\u00a0<\/span><\/p>\n

Since February 2021, we have taken a number of enforcement actions against this Defendant, including disabling accounts, sending a cease and desist letter, and revoking the Defendant\u2019s access to Meta\u2019s services.\u00a0<\/span><\/p>\n

How Can I Keep My Account and Information Safe?<\/h2>\n

Giving unauthorized apps or websites your login credentials provides them with complete access to your account, allowing them to see personal messages, find information on your friends and potentially post harmful content on your profile.<\/span><\/p>\n

When people compromise their accounts in this way, they lose visibility and control of who is viewing their content and interacting with their account, and their data can be used for a variety of potentially nefarious purposes.\u00a0<\/span><\/p>\n

Here are steps you can take to protect your data:<\/span><\/p>\n