Facebook Ads Account Disabled for Suspicious Activity — what to check first (without making it worse)
Steve H.
Expert ★★★★★ 27,853 satisfied customers
Specialities: Meta Business Suite triage for disabled ad accounts, Account Quality review prep, suspicious activity & hijack signals, billing/payment risk checks.
When Facebook/Meta disables an ad account for suspicious activity, check account security, admin access, payment risk signals, and Account Quality notes before requesting more reviews
Technician
I want to keep this low-risk. I’m not going to tell you to click random buttons, spam “Request Review,” or change everything at once. That can sometimes reduce your options.
First, a few quick questions so we diagnose safely:
1) Is it the ad account, your Business portfolio / Business Manager, or your personal profile that’s restricted?
2) Where do you see the notice — Ads Manager, Meta Business Suite, Account Quality, email, or a pop-up inside Facebook?
3) Did anything change shortly before it happened (new admin added, new payment method, new device/location, VPN, large spend increase, agency access)?
Technician
Let’s start with “safe checks” that don’t alter campaigns or delete anything:
• Access: Are you able to open Account Quality and see a specific reason or “What you can do” section?
• Security: Do you have two-factor authentication (2FA) enabled on the main admin profile?
• Billing: Was the new card added recently, and is the billing country consistent with your business location?
Technician
Two trust moments here (because I don’t want you to lose access):
1) Please don’t remove admins or payment methods in a panic — that can create more flags.
2) Don’t keep clicking “Request Review” over and over. One clean, well-documented request is safer than many attempts.
Quick checks (low risk):
• Login alerts: In your Facebook security settings, do you see any “logins you don’t recognize”?
• Admin list: In Business settings, do you recognize every person and every partner/agency listed?
• Payment: Any recent failed charges, chargebacks, or unusual small verification charges?
Technician
I’m not saying anyone “hacked” you — but Meta’s systems often treat older unused access as a risk factor. Especially if the contractor’s account is in another country or hasn’t used 2FA.
Before changing anything, one question (important for seniors/owners):
Do you still need that contractor’s access for anything? If not, we can plan a careful cleanup — but I don’t want you to remove the wrong role and lock yourself out of the business portfolio.
Technician
Here’s how we “prove the story” without guessing:
1) Confirm the restriction scope: Is it only one ad account, or the whole Business portfolio? (Account Quality usually shows which asset is affected.)
2) Confirm who is the primary admin: Make sure your profile is the top-level admin and has 2FA. This is a common requirement for reviews.
3) Confirm billing stability: The payment method should be valid, matching country/region where possible, and no recent chargebacks.
We’re not “fixing” it yet — we’re building a clean, support-ready picture.
Technician
Another trust moment: I don’t want you to start removing people in a hurry. First we check permissions.
Can you tell me:
• Does your assistant have “Admin” access or a lower role?
• Are there any partners listed (agencies, tools, old integrations) you don’t recognize?
• Did spend spike, new ads launch, or new countries/audiences get targeted right before the disablement?
Technician
The goal now is to avoid actions that look like “panic behavior.” Safe next checks:
• Permissions audit: list every admin/partner/integration and confirm it’s still needed.
• Security baseline: ensure key admins have 2FA, and no one is sharing logins.
• Billing consistency: confirm the payment method is stable and matches the business identity as closely as possible.
Then, if Account Quality offers a review path, you submit a single, calm request with those facts.
Technician
A safe structure (no “promises,” no blame):
• State the problem: “Ad account disabled for suspicious activity.”
• State what you checked: “No unauthorized logins found; reviewed admins/partners; confirmed billing method; enabled 2FA for admins.”
• Mention the timing: “Change in admin/billing and a campaign spend increase occurred around the same period.”
• Ask for guidance: “Please review and advise any required verification steps.”
You’re not confessing — you’re showing you’re taking responsible, low-risk steps.
Technician
If there’s no button, don’t “fight the interface.” Do these safe checks instead:
• Verify you’re in the correct place (Account Quality / Business Support Home).
• Confirm your identity/security steps are complete (2FA, trusted device, secure email).
• Look for any required verification in “What you can do.”
The best thing is to keep a clean record: screenshots of the restriction screen, timestamps, and what changed.
Technician
That said, a browser can matter in two limited ways:
• If you can’t see the review steps due to cached pages or blocked scripts (rare, but possible).
• If you’re signing in from constantly changing devices/locations, which can raise security flags.
For seniors and business owners, I recommend a “steady setup” while this is being reviewed: one main device, one main network if possible, and avoid VPN until the case is resolved.
Technician
If you want, you can paste the exact wording you see in Account Quality (just the text), and we can map it to the safest next check without guessing.
Quick answer: the accepted fix
Accepted first step for Facebook Ads Account Disabled for Suspicious Activity: pause rapid changes and repeated review attempts, then do a calm “risk audit” — confirm the restriction scope in Account Quality, verify admin access and 2FA for people with financial permissions, review unknown admins/partners/integrations, and check for recent billing failures or chargebacks. Keep your login environment steady (no VPN, consistent device/location) and collect screenshots/timestamps. This helps you request a review with clear, low-risk facts instead of guessing.
Why Meta disables ad accounts for “suspicious activity”
Modern ad platforms use risk scoring to protect accounts and payments. “Suspicious activity” is often triggered by admin/access changes, unusual login locations, sudden spend spikes, repeated failed billing, unfamiliar integrations, or signals that the business assets may be compromised. Even if you did nothing “wrong,” Meta may temporarily restrict advertising until identity, security, or payment risk checks are satisfied.
Safe checks before you request another review
Start with the least risky checks: confirm what asset is restricted in Account Quality, verify your admin roles and 2FA, review partner access and connected tools, and confirm billing details are stable and consistent. Avoid quick repeated edits to payment methods, frequent admin removals, or constant login changes while restrictions are active. A calm, well-documented review request is usually safer than multiple attempts.
Security tip: avoid “instant reinstatement” scams
Disabled ad accounts are a common target for fraud.
If someone asks for your verification code, password, recovery email access, or remote control of your computer, treat it as suspicious. Legitimate recovery happens only inside Meta’s official flows (Account Quality / Business Support). Stick to safe checks, keep screenshots and dates, and don’t rush changes that could raise additional flags.
Disclaimer: This information is AI-generated and intended for general guidance only. Steps vary by account status, region, and verification level. For exact instructions for your setup, consult a verified expert or the platform’s support site.
Getting Started Is Easy
Low-risk diagnosis
Identify whether the disablement is driven by security access, payment risk, unusual activity patterns, or verification requirements.
Reduce account risk
Learn what to check first so you don’t trigger more restrictions while the system is already in “high alert” mode.
Escalation-ready notes
Collect screenshots, timestamps, and changes (admins, billing, spend) so your review request is clear and credible.
FAQ
Why did it start suddenly?
It can happen after a small change that raises risk. Common triggers are new admins, new payment methods, travel logins, spend spikes, or a failed billing attempt. Meta may restrict advertising while it checks for account compromise or payment risk. If you keep making rapid changes, the restriction can feel “sudden” and confusing.
Did this happen after an update or a new campaign?
Yes, it can. Launching new campaigns, changing creatives, or increasing budgets quickly can look unusual, especially if the account is new or recently changed hands. Platform-side risk systems can react even when your ads are compliant. The safest step is to review Account Quality notes and document what changed around the time it began.
Is it hardware or settings on my computer?
Almost never hardware. A disabled ad account is a platform restriction tied to your Meta assets, security, and billing profile. Your browser or device only matters if it’s causing unstable logins (VPN, constantly changing locations) or hiding review prompts. Use one steady device and avoid frequent login changes while it’s under review.
Can this be fixed without a service or paid help?
Often, yes. Start with safe checks: confirm the restriction scope in Account Quality, verify admin roles and 2FA, review partners/integrations, and confirm billing stability. Then submit a single, calm review request if available. If the review option is missing or you suspect compromise, use Meta’s official support channels and provide clear notes.
Sources
- Meta Business Help Center — About Advertising Restrictions
- Meta Business Help Center — Troubleshoot a Disabled or Restricted Account
- Meta Business Help Center — Request a Review for a Restricted Advertising Account
- Meta Transparency Center — Advertising Standards
Filed under: Account Access Help
Related articles
- Email Account Compromised and Disabled — what to check first (safe steps before you make it worse)
- Email Account Compromised After Suspicious Login — what to check first (without making it worse)
- Not receiving verification emails — I clicked “Send code” but nothing arrives
- Not receiving emails, but I can send — what do I check first?
- Invoice emails missing from inbox — I can’t find them anywhere
- Emails stopped arriving overnight — what to check first (without changing anything risky)
- Verified my email… and now emails stopped arriving — what do I check first?
- Emails stopped arriving after using a VPN — what to check first (safely)
