Scam: I was logged into Facebook for XXXX hours in 2010

Graham Cluley
Graham Cluley
@[email protected]

Spam messages are spreading across Facebook claiming to be from users who have calculated the total hours they spent on the social network during 2010.

Would you be tempted to find out how long you had spent on Facebook in the last year? Well, I would be cautious if I were you as you could find yourself assisting scammers who are using rogue applications to make themselves a quick buck.

Facebook hours message

Typical messages read:

Sign up to our free newsletter.
Security news, advice, and tips.

I was logged into facebook for XXXX hours in 2010!

Check yours @ [LINK]


I spent a total of XXXX Hrs on Facebook in 2010 WOW. What are your hours like? I found out from [LINK] ...Enjoy!

If you click on the links you will be taken to a third-party application permissions dialog. As with legitimate Facebook applications, this app needs your permission to access information on your profile. Unfortunately this rogue application is not interested in calculating the real number of hours you spent on Facebook, all it cares about is spreading its message virally between users.

Facebook hours application

Because as soon as you click “Approve” the rogue app takes the opportunity to post a message on your Facebook page, like the ones above, designed to fool your friends into believing you’ve found out how many hours you spent on the website during 2010.

And so the scam spreads virally.

What is the point of the scam? To make money by tricking you into taking a survey.

Facebook hours survey scam

The webpage you are taken to after approving the rogue application tricks you into believing that you can find out how many hours you were logged into Facebook once you have completed a survey as a “security check”.

In reality, the scammers earn commission for each survey completed. And you’ve just helped them spread the survey onto your friends as well.

If you have been hit by scams like this on Facebook, and are struggling to clean-up your profile, here’s a YouTube video I made which describes what steps you need to take:


Make sure that you keep informed about the latest scams spreading fast across Facebook and other internet attacks. Join the Sophos page on Facebook, where over 50,000 people regularly share information on threats and discuss the latest security news.

Graham Cluley is an award-winning keynote speaker who has given presentations around the world about cybersecurity, hackers, and online privacy. A veteran of the computer security industry since the early 1990s, he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows, makes regular media appearances, and is the co-host of the popular "Smashing Security" podcast. Follow him on Twitter, Mastodon, Threads, Bluesky, or drop him an email.

What do you think? Leave a comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.