 fell for one of those notifications, you logged in with your password, they got it, they immediately try to hijack your account, they wouldn't be able to because there would be a secondary code that is texted to your phone and that would make it so that they wouldn't be able to get in. The other thing to do if you have a Facebook business account is to get an admin on that account, someone you trust that is not you. And that way, if there's ever a problem with your Facebook account, because these are usually linked to a personal Facebook account,