What Happened to MassRoot8? The Facebook Lawsuit, Dated

MassRoot8 was a free website that asked for your Facebook login and used it to collect your friends' contact details. Facebook sued its operator, Mohamed Zaghar, in federal court in San Francisco on June 18, 2020. In May 2021 the court entered an injunction as part of a settlement. Meta says Zaghar and "anyone acting on his behalf are permanently banned from using Facebook or Instagram." The domain was registered again in July 2021, and today massroot8.com shows an Indonesian slot gambling page.

We read the complaint, Meta's newsroom post, the registry record, the Internet Archive's copies and the live address through our server on October 23, 2026.

What happened to MassRoot8, step by step?

Date	What happened
Aug 2014	fast-likers.com opens
Jul 11, 2018	Facebook's cease and desist
Oct 27, 2018	MassRoot8 running by then
Apr to May 2020	About 5,500 logins used
Jun 18, 2020	Facebook sues
May 2021	Injunction and settlement
Jul 26, 2021	Domain registered again
Oct 2026	A slot gambling page

The complaint in case No. 3:20-cv-04054, Meta's newsroom post and its updates, Verisign's registry record and the Internet Archive, read October 23, 2026.

MassRoot8 had a history before its own name. The complaint says Zaghar ran fast-likers.com and fast-autolikers.com from 2014 to 2018. Those sites sold "fake engagement services, including the ability to artificially increase the number of a users' Facebook friends." Facebook sent him a cease and desist letter on or about July 11, 2018 and disabled his accounts. By October 27, 2018, he was "redirecting users of the fast-autolikers.com website to the massroot8.com website."

What was MassRoot8?

Its January 2020 home page said "With your account on our website u manage Multiple Facebook Accounts for extracting and posting." It also offered a "mail checker and mail extractor." It didn't cost anything. The complaint says Zaghar "did not charge users a fee" and "ran advertisements on his website" instead.

What it took	Whose
Facebook username and password	The user's
Email addresses	Their friends'
Phone numbers	Their friends'
Dates of birth	Their friends'

Complaint, paragraphs 37 and 40, filed June 18, 2020.

To use it, you'd link your Facebook account and hand over your password. Its bots then "pretended to be an Android device connected to the official Facebook mobile app," the complaint says. Between April 23 and May 6, 2020, the service used "approximately 5,500" users' logins. It pulled their friends' email addresses, phone numbers and birth dates. The complaint notes that much of that data "was not publicly viewable."

What did Facebook's lawsuit decide?

Facebook's complaint cited its terms, the Computer Fraud and Abuse Act and California Penal Code section 502. On May 18, 2021, Meta's newsroom reported the outcome. The court had "entered an injunction against Mohammad Zaghar" the week before, as "part of a settlement agreement." Under it, Zaghar had to share "his code and infrastructure details" and give "proof that he had deleted the data obtained from scraping."

TechCrunch named MassRoot8 again in October 2022, among Meta's earlier cases, when it covered a later settlement, as Google shows it.

Can you still log in to MassRoot8?

No. About 880 people a month still search for "massroot8 login," but there's no service left to log in to. Its domain was registered again on July 26, 2021, after the case. The archive's copies show blank pages in 2022 and 2023, then "Redirecting..." pages into May 2026. On October 23, 2026, the address showed a page titled "WAJIKWIN : SLOT GACOR Maxwin Hari Ini," an Indonesian slot gambling promotion.

Don't enter a password or card number there. The people behind the page aren't the ones who ran MassRoot8, as far as any record shows, and the page doesn't have anything to do with Facebook.

What should you do if you used MassRoot8?

The complaint says Facebook made affected users "create new passwords." If you ever gave MassRoot8 your login, change your Facebook password now. Then turn on two-factor login, if it isn't on already. Check Facebook's list of logged-in devices for ones you don't know. Our guide to an Instagram account that's been hacked walks through the same steps for Instagram.

An honest growth service doesn't need your password. Hclout's free tier gives 12 free Instagram likes and 100 free Instagram views on a public post with no login, on the free page. A short Cloudflare check runs before each claim.

What HCLOUT Offers Instead

• No credential access required, ever
• Free tier so you can test before spending a cent
• 24/7 live chat support from real people
• 30-day refill guarantee if your count drops

If the MassRoot8 story taught you anything, it should be this: never trust a service that needs your password.

Frequently asked questions

What happened to MassRoot8?

Facebook sued its operator in June 2020 for scraping user data with people's logins. In May 2021 the case ended in a settlement and an injunction that permanently bans him from Facebook and Instagram.

What was MassRoot8?

A free, ad-run website that asked for Facebook logins and used them to collect friends' emails, phone numbers and birth dates.

Can you still log in to MassRoot8?

No. The service doesn't exist anymore, and since a new registration in July 2021 the address has shown other content, now a slot gambling page.

How many people used MassRoot8?

The complaint says about 5,500 users' logins were used between April 23 and May 6, 2020.

Can I still find a MassRoot8 alternative for Facebook management?

Yes, but use legitimate tools. Facebook's own Business Suite handles multi-account management through official channels. Third-party tools like Hootsuite and Buffer use authorized APIs that never require your raw password. For Instagram growth specifically, HCLOUT offers a free tier that doesn't require any credential access.

Who ran MassRoot8?

The complaint names Mohamed Zaghar, who earlier ran fast-likers.com and fast-autolikers.com.

Sources

• Facebook, Inc. v. Mohamed Zaghar d/b/a Massroot8, complaint, US District Court for the Northern District of California, case No. 3:20-cv-04054, filed June 18, 2020, read October 23, 2026
• Meta, "Taking Legal Action Against Those Who Abuse Our Services," June 18, 2020, with updates of August 12, 2020 and May 18, 2021, read October 23, 2026
• Verisign, registry record for massroot8.com, read October 23, 2026
• Internet Archive, capture list for massroot8.com and its captures of January 25, 2020 to May 2, 2026, read October 23, 2026
• Our read of massroot8.com, October 23, 2026
• CyberScoop, BuzzFeed News and TechCrunch, as Google showed them on October 23, 2026
• Google Ads Keyword Planner, worldwide, read October 23, 2026