Like so many scams, this one seems innocent enough. You receive a Facebook message with a video link asking, “Is this you?” Of course you’re curious, so you click the link. When you do, you’re taken to a website that appears to be Facebook or YouTube and asked to log in again. If you log in, you’re actually providing your login credentials to the scammer, and they now have access to your account.

To avoid the scam, don’t click links that ask, “Is this you?” even if the message appears to be from someone you know. Instead, delete the message and make sure your firewall and antivirus software are up to date. Contact the sender (if you know them) using an alternative method such as a text and tell them their account may be compromised.

If you’ve already fallen for it (and don’t feel bad, it could happen to anyone), immediately reset your password for the site you provided credentials for and keep an eye out for suspicious activity on your account. Regularly check and update the privacy settings on all your social media accounts. You may also want to alert the site where this happened as well as the Better Business Bureau.