Most hackers don't change your password and lock you out immediately. They prefer to linger. By using (those "Is this you in this video?" messages), they trick users into handing over credentials. Once inside, they can scrape your private messages, monitor your habits, or use your account to launch attacks on your friends. According to security insights on LeetCode , Facebook’s automated systems try to track suspicious logins, but they aren't always fast enough to stop a subtle intruder. 2. The Psychology of the Scam