Facebook Account Security Tips

This are some help on how users can protect his/her Facebook account
  • Be suspicious of anyone – even friends – who ask for money over the Internet. Verify their circumstances independently (e.g. call them or mutual friends).
  • Choose a strong password and use unique credentials for each of your web accounts (we believe users are being phished on one site and the bad guys are then trying those credentials on another).
  • Use an up-to-date browser that features an anti-phishing blacklist.
  • Use and run anti-virus on your machine.
  • Reset your Facebook password if you suspect your account has been compromised.
  • Have more than one contact email address (in case one is compromised).
Here are some examples of common tactics, as cited on its security page:

Fake Notification Emails
Look out for fake emails that look like they came from Facebook. These typically include links to phony pages that attempt to steal your login information or prompt you to download malware. Never click on links in suspicious emails.

Suspicious Posts and Messages
Be wary of strange Wall posts and messages, even if they're from friends. These will usually ask you to click on a link, sometimes to check out a new photo or video that doesn't actually exist. The link is typically for a phony login page or malware site.

419 Scams
Watch out for messages from friends or others claiming to be stranded and asking for money. These messages are typically from scammers. If you have received a message like this, or one has been sent from your account without your permission, please contact us so that we can make sure your and your friends’ accounts are secure.

The Koobface Worm
If your account has been used to send spam, and you think your computer is infected with the "Koobface" worm or another virus, please visit one of the online anti-virus scanners from the Helpful Links list, and reset your password.

False Letters
Don't believe messages claiming that Facebook is becoming overpopulated and suggesting that accounts will be deleted. These messages are false and did not come from Mark Zuckerberg or Facebook. They can be safely disregarded and deleted.

what will you do if you have already fall a victim
Change your password immediately, warn your friends not to click suspicious links your account may have sent, and contact privacy@facebook.com to report the attack.
Delete all suspicious application and know the type of application you receive(sign up with) because not all apps are safe, most of them are scam.
Don't disclose any thing confidential  on facebook

Comments