There are numerous variations on the Facebook phishing scam. They can take the form of bogus security alerts, password reset requests, and announcements of fraudulent contests, among other things. Each of them makes an attempt to lure the victim into clicking a link or opening an attachment that may contain a malicious payload.