Back to blog

Facebook terms of service violation: an agency triage plan

A Facebook terms of service violation notice on a client Page? Verify it, log seven facts, request a review, then audit admin access before Black Friday.

Kristian Hoffmann

SaaS founder and operator

facebook terms of service violation

A Facebook terms of service violation means Meta has found that something on a profile, Page, Group or ad account broke the Terms of Service you accepted, or one of the policies those terms point to, such as the Community Standards. Under sections 3.2 and 4.2 of those terms, the result can be anything from one removed post to a suspended or disabled account. If you run client accounts as a designer or agency, four steps hold up in most cases: confirm the notice is real, record exactly what it says, use the review option attached to it, and close the access and rights gaps that made the restriction expensive.

In agency work, the violation is often not the costly part. The costly part is finding out, on the day the notice arrives, that the only admin on the client's Page is a freelancer who left in spring.

What Meta's own documents say counts as a violation

Terms of Service, Community Standards and "other policies"

The Terms of Service is the agreement a person accepts in order to use Facebook. It lists what you may not use Meta's products to do, including uploading viruses or malicious code and using the services to send spam (Terms of Service, section 3.2). The Community Standards are Meta's rules on what content is allowed. Meta's Terms and Policies hub lists both and describes the Community Standards as "what's not allowed and how to report abuse." Ads have a rulebook of their own: Meta reviews each ad against its Advertising Standards, and advertisers have to follow those as well as the Community Standards.

When you triage a notice, the label on it matters less than you would expect. Meta's terms name these documents side by side. The version of the Facebook Terms that Meta included in its terms-of-service report under New York law for July to September 2025 (PDF on the New York Attorney General's website) says you cannot use Facebook if Meta has previously disabled your account "for violations of our Terms, the Community Standards, or other terms and policies that apply to your use of Facebook." In the same filing, Meta lists Advertising Standards for ads and Commerce Policies for selling products next to the Community Standards. So your first hour looks the same whichever of these documents the notice names.

The quotes from Facebook's Terms in this article come from that US filing, which reproduces the US terms dated January 1, 2025; an archived copy of the US page from mid-September 2026 still carries that date. The version that applies to you depends on where you live, and it can change, so check the terms linked from your own account before you rely on a section number or a quote.

The EU version is a good example. It is provided by Meta Platforms Ireland Limited, and its enforcement clauses are worded differently: it says that, with some exceptions, Meta will notify you of a removal or restriction and the reason for it, and that you can request a review. In the EU, the Digital Services Act adds statutory rights on top. Platforms must give affected users a clear and specific statement of reasons for a removal, restriction or suspension (Article 17). They must let users complain through an internal complaint-handling system, free of charge, for at least six months after they were informed of the decision (Article 20). Users can also take the dispute to a certified out-of-court dispute settlement body (Article 21), without losing the right to go to court (Regulation (EU) 2022/2065 on EUR-Lex). If a client's revenue depends on the account, that's the point to bring in a lawyer.

Consequences Meta names, and what each changes for a client account

ConsequenceWhere Meta states itWhat it changes for an agency
Content removed or restrictedFacebook Terms, section 3.2: Meta "can remove or restrict access to content that is in violation of these provisions"The post or creative can disappear from the account. You only have the approved version if you stored it somewhere else.
Suspended or disabled accessFacebook Terms, section 4.2: if Meta determines you have "clearly, seriously or repeatedly breached" its Terms or Policies, it may suspend or permanently disable access and may disable or delete the accountRepetition counts, not only the post named in the notice. Check the client's other recent posts for the same problem.
Disabled account, no fresh startFacebook Terms, section 3.1: if Meta disables your account for a violation, "you agree not to create another account without our permission"A replacement profile doesn't get around the block. Build continuity through a second admin instead.

The terms don't say how long a restriction lasts or how a review gets decided. They do say that when Meta removes content or suspends or disables an account, it will let you know and explain any options to request a review. There are exceptions, for example where telling you could expose Meta or others to legal liability or where the law prohibits it (sections 3.2 and 4.2). For removed content, section 3.2 also leaves out people who seriously or repeatedly violate the terms.

Meta's Transparency Center fills in part of the gap. For most violations, a first strike leads to a warning, further strikes can restrict features for longer periods, and your Account Status shows your violation history, some restrictions and how long they will last (Restricting accounts). If you need a number, take it from the notice or the status screen of the affected asset, not from a forum thread.

The first hour: verify the notice before anyone clicks

Check that the notice is real

A message warning that a Page will be removed for a policy violation looks exactly like what a phishing attempt on Page admins would send. Verify it before you reply to anything.

  • Open Facebook yourself, by typing the address or using the app, not through the link in the message. Look for the same notice inside the account: in notifications, in Account Status for a profile, in Page Quality or Group Quality for a Page or group you manage (Restricting accounts), or in Account Quality for ads and business assets if your role gives you access.
  • Treat any message that asks for a password, a login code or a form outside facebook.com as unverified.
  • If the notice shows up only in email or a direct message and nowhere inside the account, log it as "unconfirmed" and stop there.

The seven-item evidence pack

Before anyone requests a review, collect these seven items in one dated folder:

  • A full screenshot of the notice, with the address bar or app screen visible.
  • The notice text copied word for word into a text file, because screenshots are hard to search later.
  • The date and time you first saw it, with your time zone.
  • The asset: the name and ID of the profile, Page, Group or ad account.
  • The rule cited, in Meta's words: Terms, Community Standards, a named policy, or none given.
  • The consequence stated: removed content, a limited feature, an end date or a disabled account.
  • The current admin list for that asset, showing who holds which role today.

The last item, the admin list, looks like paperwork, but it decides who can file the review at all.

Match the asset to the person who can act

AssetWhose notice it isThe agency's move
Personal profileThe person who owns itAdvise them, but don't log in with their password to "fix it quickly". Section 3.1 of Facebook's Terms asks users not to share their password or give others access to their account. The review should come from their own account.
PagePeople with full control of the PageBefore anything gets submitted, confirm that at least one person on the client's side has full control.
GroupGroup adminsFind out whether the flagged post came from a member, an admin or a scheduling tool.
Ad accountPeople with access through the business accountHold related scheduled campaigns. Keep the rejected creative and its approval record. Reviews of rejected ads and restricted business assets run through Account Quality.

Requesting a review without making things worse

Use the review option attached to the notice itself, and have the person who holds the asset submit it. One clear submission built from the evidence pack is easier to follow up on later than three rushed ones from different people.

Three moves that complicate a restriction

  • Opening a replacement profile or a duplicate Page. Facebook's Terms (section 3.1) say that if Meta disables your account for a violation, you agree not to create another account without its permission. Meta's Account Integrity standard adds that it may restrict or disable accounts, Pages, groups and business assets created or repurposed to evade a previous removal.
  • Re-posting the removed material unchanged while the review is open. Section 4.2 lets Meta suspend or disable access for repeated breaches. A second copy can add to that pattern and doesn't test the decision.
  • Letting several people submit. Section 3.2 prohibits misusing appeals channels, "such as by making fraudulent, duplicative, or groundless reports or appeals." If the freelancer, the account manager and the client each file something, nobody can tell which version Meta is looking at.

When the question is about rights, not wording

Say the notice cites intellectual property, such as a photo, a video clip or a music track. The review form can't answer the real question: did the client hold the rights to that file? Facebook's Terms (section 3.2) prohibit sharing anything "that you do not own or have the necessary rights to share." Whether the client had those rights is a question for the client, and for a lawyer if money or a dispute is involved.

What you can supply is where the file came from: who uploaded it, when, and what they said about its source. For the intellectual property clause in your own client terms, see Terms of service: what it is and why you need one.

A 24-point restriction-readiness audit before Black Friday

Black Friday is on 27 November 2026 and Cyber Monday on 30 November. Counting from 1 October, that leaves 57 days. That's plenty of time to sort out access and rights records calmly, and far more than you get once a restriction hits during a scheduled campaign.

Decision rule: in the first half of October, run this audit for every client with Facebook posts or ads scheduled between 1 and 30 November.

Score each check 0 (not in place), 1 (partly in place) or 3 (fully in place). The maximum is 24.

#CheckFully in place (3 points)
1Client-side controlAt least two people on the client's staff have full control of the Page
2Agency access routeThe agency's access runs through the client's business account, not just a freelancer's personal profile
3Login protectionTwo-factor authentication is on for everyone with full control
4Recovery contactsEvery admin's recovery email and phone belong to someone still involved
5Rights recordEvery image, video and audio file in the November creative has a noted source: own photo, licence or stock ID
6Approval recordThe client's written approval for each campaign creative is stored outside Facebook
7Offline copyCaptions and creative scheduled through 30 November exist as files you control
8Violation logA log with the seven evidence fields exists, and any open notice is documented
  • 18–24: Ready. Check the admin list again after any staff change at the client.
  • 12–17: Fix checks 1–4 before November campaigns go live.
  • 0–11: Stop scheduling. Fix access first, then the rights records.

Worked example (fictional)

A three-person studio manages Facebook Pages for nine clients. Three of those Pages have a single admin, so a third of the portfolio (33%) has a single point of failure before any notice arrives.

One of those three, a fictional bakery, scores: client-side control 1 (only the owner), agency access 0 (it runs through a former freelancer's personal profile), login protection 3, recovery contacts 1, rights record 0 (stock photos with no IDs), approval record 3, offline copy 1 and violation log 1. That's 10 points, so it lands in the stop-scheduling band.

The studio fixes three things in one week: it adds a second admin on the client's side, moves its own access onto the business account, and asks the client to confirm image sources. Checks 1, 2 and 5 each move to 3 points. The new score is 18, and November posts can go on the schedule.

Checks 5 and 6 are really intake questions, not Facebook questions. If your briefs and files already come in through a client portal such as cluein.me, ask for each image's source when the client uploads it, and keep the approval with the file in the handoff export. That way the answer is ready before anyone needs it for a review.

FAQ

How long does a violation stay on your Facebook account?

Facebook's Terms don't give one duration that covers every violation. Meta's Transparency Center says that all strikes on Facebook or Instagram expire after one year, and that a strike on content posted to a Page or group you manage may also count against that Page or group (Counting strikes). A restriction is separate from the strike. Where Meta shows how long a restriction lasts, you'll find it in the notice or in Account Status, Page Quality or Account Quality for the affected asset. Log the date and any end date shown there, and check again after that date instead of assuming the restriction has cleared. Treat fixed numbers from forums as unverified.

What happens if I violate Terms of Service?

Facebook's Terms say Meta can remove or restrict access to content that violates them (section 3.2). For clear, serious or repeated breaches, Meta may suspend or permanently disable access (section 4.2), and if it disables your account for a violation, you agree not to create another account without its permission (section 3.1). For most Community Standards violations, Meta's Transparency Center says a first strike leads to a warning, and further strikes can restrict features for longer periods (Restricting accounts). What applies to you depends on the specific notice, so read the consequence it states before you decide how to respond.

How do I know if I violated Facebook policies?

Look inside the account: at notifications, Account Status for a profile, Page Quality or Group Quality for Pages and groups you manage, and Account Quality for ad accounts and business assets your role lets you see. An email or direct message on its own doesn't confirm anything, especially if it links outside facebook.com or asks for a login. If nothing shows up inside the account, treat the message as unverified.

How can I recover my disabled Facebook account?

Log in and read the disabled-account message. Meta says it shows that message when you try to log in and tells you whether you can request another review (Disabling accounts). If a review is offered, the person who owns the account should submit it, with the seven-item evidence pack ready. Don't open a replacement account to get around it: under section 3.1 of Facebook's Terms, you agree not to create another account without Meta's permission after your account was disabled for a violation. Nobody can promise how the review turns out, which is why a second admin on the client's side matters: it gives the client a way to keep managing their Pages while the review is decided.

Analytics consent

We use Google Analytics only after consent to understand reach and product usage.