Meta SMS short code service compromised
I'm posting this here because it's related to all Meta services – including meta VR accounts – and I can't find another avenue to report this issue.
As I understand, Meta uses a short code number for 2FA that provides users with codes and/or links that are using to sign in to an associated account. The short code that I normally receive notifications from is 89854 and/or 39041. I recently sent "help" to the short code number 89854 in an attempt to see if more options for sign in would be provided.
To my surprise, I received the following response: "Facebook Alerts:Help? https://www.facebook.com/help or call 888510####. Msg freq may vary. Msg&data rates may apply. Reply STOP to end." While the link is valid and takes me to facebook.com, the number leads directly to a call center that attempted to sell me a number of services.
Depending on the time of day, it either directs me to a call center offering a fall detection service for seniors, or a 18+ call center offering phone sex. Regardless of the destination, this is unacceptable and seems like a huge liability.
The normal short code response to "help" is either to not send any response at all, or to send a link – no number included – directing a user to www.facebook.com/help. So, how hasn't this previously been discovered and fixed?
I'm attaching a screenshot of the message I received from your short code service. Please let me know if I can provide any more useful information.
