A PayPal FACEBOOKIRE charge on your statement is a payment that PayPal processed on behalf of Facebook or Meta, usually appearing as “PAYPAL *FACEBOOKIRE.” It shows up when a PayPal account linked to Facebook is billed for advertising, in-app purchases, Marketplace, gaming, or subscriptions. If you don’t recognize it, the most common cause is a compromised Facebook Ads account being used by an attacker to run ads on your dime through the pre-approved payment agreement between PayPal and Facebook.
What You’re Actually Being Billed For
PayPal sits between you and Meta as the payment processor. Once you’ve linked PayPal to Facebook for any reason, Facebook can pull funds under a standing authorization without prompting you each time. Legitimate charges include active ad campaigns, Facebook Gaming subscriptions, donations made on the platform, and purchases from Marketplace sellers who accept PayPal.
If none of those apply, assume fraud. Attackers who gain access to a Facebook account locate or create an ad account tied to the victim’s PayPal and run ads promoting unrelated products, often at aggressive daily budgets. Reported losses have ranged from about $20 to over $10,000, with daily spending ceilings set in the hundreds or thousands.1Dark Star Digital. Facebook Ads Account Got Hacked Because PayPal treats the Facebook link as a pre-approved direct debit, the charges can look authorized from the processor’s side even when they weren’t, and two-factor authentication on Facebook does not always block the attack when stolen billing credentials or a hijacked session is involved.2Who’s the Mummy. How a PayPal Facebook Ads Scam Cost Me £700
Cut the Payment Link Before You Do Anything Else
Every hour you wait, more charges can post. Revoke the standing agreement first, then dispute.
In PayPal on the web, go to Settings, then Payments, then “Subscriptions and saved businesses” or “Automatic Payments,” find the Facebook or Meta entry, and cancel it.3PayPal. What Is an Automatic Payment and How Do I Update or Cancel One In the app, use the Menu icon, then “Subscriptions” or “Linked Businesses,” and unlink Facebook. Once the automatic payment agreement is cancelled, Facebook can’t pull any more money while your dispute runs.
On Facebook, open Ad Manager, deactivate any ads you didn’t create, and remove every stored payment method from the ad account. If a fraudulent ad won’t delete, drop its daily budget to the minimum allowed to limit further spend.1Dark Star Digital. Facebook Ads Account Got Hacked Change your Facebook password, turn on login alerts, and check Ad Account Roles for admins the attacker may have added.
File the Dispute With PayPal
Report unauthorized transactions through PayPal’s Resolution Center within 180 days of the transaction date.4PayPal. Unauthorized Transactions On the website, log in, open the Resolution Center, select “Report a problem,” pick the transaction, and mark it unauthorized. In the app, tap Activity, open the payment, and tap “Report a Problem.”5PayPal. How Do I Report an Unauthorized Transaction or Account Activity
PayPal opens an investigation after a claim is filed and emails a status update within 10 days. If the transaction is confirmed unauthorized, PayPal refunds the amount and you are not held liable.4PayPal. Unauthorized Transactions Some consumers who dealt with Facebook Ads fraud report better outcomes when they framed the claim as “product or service not received” rather than purely unauthorized access, because the pre-approved payment structure muddies a straight unauthorized-access claim.2Who’s the Mummy. How a PayPal Facebook Ads Scam Cost Me £700
One hard limit: PayPal will not run a claim on the same transaction you’ve already filed as a chargeback with your bank or card issuer. Pick one channel.6PayPal. Buyer Protection
If PayPal Denies Your Claim
Denials happen because the standing payment agreement makes the activity look authorized on PayPal’s end. If that happens, escalate.
Submit a formal Subject Access Request to both PayPal and Meta, asking specifically for login IP addresses, the original pre-authorized payment agreement, and the full transaction history. That record often shows the activity didn’t come from you. File a fraud report with the FTC at reportfraud.ftc.gov or the FBI’s Internet Crime Complaint Center; a documented report strengthens an appeal.7PayPal. Report Fraud
Your Federal Protections Under Regulation E
The Electronic Fund Transfer Act and Regulation E cap your liability for unauthorized electronic transfers from accounts like PayPal, with the cap depending on how fast you report.8Consumer Financial Protection Bureau. Regulation E, Section 1005.6
- Reported within 2 business days: liability is capped at $50 or the actual loss, whichever is less.
- Reported after 2 business days but within 60 days of the statement: liability can rise to $500, covering transfers that occurred after the two-day window but before you notified PayPal.
- Reported after 60 days: potentially unlimited liability for transfers that occurred after the 60-day period, if PayPal can show timely reporting would have prevented them.
Regulation E bars institutions from raising your liability above these caps because of negligence, so a weak or reused password cannot be used against you.9Consumer Financial Protection Bureau. Electronic Fund Transfers FAQs PayPal also cannot require you to file a police report or contact the merchant before investigating. If your state law or account agreement sets lower liability limits, those more favorable terms apply.10eCFR. 12 CFR 1005.6
Lock Down Both Accounts
Treat the charge as a sign that one or both accounts are compromised. On PayPal, reset the password to a unique string of at least 15 characters, turn on two-factor authentication, and review authorized devices under Settings, then Security, then “Manage your logins.” Check your profile for email addresses or phone numbers you didn’t add.5PayPal. How Do I Report an Unauthorized Transaction or Account Activity
Call the banks and card issuers linked to your PayPal and have them watch for suspicious activity independently. A fraud alert with any one of Equifax, Experian, or TransUnion triggers the other two automatically and costs nothing.7PayPal. Report Fraud
Going forward, funding PayPal with a credit card instead of a bank account or debit card gives you a second layer of chargeback protection. Keep payment methods out of Facebook’s stored billing unless you’re actively running ads, so dormant credentials aren’t sitting there waiting to be used if the Facebook account is breached again.