Why Meta restricts for behavior, not just content
Meta's ad system runs automated behavioral monitoring across millions of accounts. It's not just looking at what your ads say — it's tracking patterns in how your account operates. Sudden changes in behavior, patterns associated with compromised accounts, and actions that look like someone trying to work around a previous restriction all trigger automated flags.
The critical thing to understand: these behavioral flags can hit accounts that are doing everything right. A new login location, a payment method change, a budget spike — all of these are normal business activities that can look suspicious to an algorithm that doesn't know your context.
The 5 most common behavioral triggers
Trigger 1 — Budget spike
Spending $50 one day and $500 the next is one of the clearest behavioral red flags in Meta's system. Compromised accounts and policy-violating campaigns often try to spend as much as possible before Meta catches up — so sudden large increases trigger automatic scrutiny. Fix: scale budgets gradually, 20–30% at a time.
Trigger 2 — New login location
Logging into Business Manager from a new country, city, or device — especially if it's very different from your usual location — can trigger a security flag. This is a built-in fraud protection, and it happens to legitimate users when they travel, switch computers, or start using a VPN. Fix: if you're traveling, log in from a recognized device before switching to a new location. If flagged, verify your identity through Meta's account recovery process.
Trigger 3 — Payment method flagged or changed
A declined payment, a new credit card added right before a big campaign, or a payment associated with a previously-flagged account can all trigger holds. Fix: keep your payment method updated proactively, not reactively. Don't change payment methods right before a large campaign launch.
Trigger 4 — Business Manager with prior violations
If your ad account is connected to a Business Manager (now called Business Portfolio) that has a history of policy violations — even if your own account never violated anything — you can be flagged by association. This happens a lot when accounts are added to an agency's Business Manager that has a checkered history. Fix: verify your Business Portfolio has a clean standing in Account Quality before connecting new ad accounts.
Trigger 5 — Unauthorized access or compromised account
If someone accessed your Business Manager without your knowledge — through a phishing link, a weak password, or adding themselves as an admin — Meta may restrict the account as a security measure. Fix: immediately remove unknown users, enable two-factor authentication, and contact Meta Business Support to report the unauthorized access. This is the one case where contacting support immediately is the right move.
Why each trigger needs a different response
A budget-spike flag is resolved differently than a compromised account flag. If you appeal a security-compromise restriction the same way you'd appeal a policy violation, your appeal won't make sense to the reviewer and will likely be denied.
Before you file anything, identify which of the five triggers above matches your situation. That determines whether you need an appeal, an identity verification, a Business Support case, or something else entirely.