I have been getting a lot if these Facebook recovery code emails lately. I figure it is scammers testing to see if 2FA is on, but is it possible that these are not coming from Facebook at all? Could they be fake? My security software says the links are safe, but I have seen it pass obvious scam emails as well, so I don’t know if I trust its assessment here.
You should be able to view the header of the email and this will give you more information so you can manually verify where the email is originating from - Trace an email with its full header - Gmail Help
2 Likes
