We think someone may have tried to access your account without permission. For your protection, you won't be able to create or modify ads until you authenticate your account in Ads Manager. Your existing ads will continue to run normally. (error code 31, subcode 3858385)

Why it happens

• Meta saw activity it considers suspicious. The message says it plainly: Meta thinks someone may have tried to access the account without permission, and it locks ad creation and editing as a protection. Meta does not say what triggered it.
• Meta can act on its own to protect an account. When it sees suspicious activity, Meta may take steps such as removing admins, pausing ads or changing payment methods.
• For API users: the call is refused until the person behind the access token completes the check in Ads Manager.

How to fix it

1. Log in to Facebook with the profile that owns the access (the one connected to your tool, if you use one).
2. Open Ads Manager and follow the authentication request Meta shows you.
3. Check who has access to the ad account: in the ad account settings, look at Ad account roles and remove anyone you do not recognise.
4. If you do not recognise recent activity or think the profile was hacked, follow Meta’s “How do I secure a hacked account?” steps.
5. Try creating or editing the ad again. Running ads were not affected.

What worked for other advertisers

Advertisers who hit this in Ads Manager shared a trick that makes Meta show the authentication prompt:

1. Open the blocked ad and change a tiny detail of the text (even a period in the primary text), then save.
2. A button to start the authentication appears above the ad preview: click it and enter the code Meta sends by email.
3. Publish. If the button is greyed out or says there is no email address, add and verify an email address in Accounts Center (or remove the phone number so the code goes to your email), then try again.

15 replies thank or confirm it in the r/FacebookAds thread on this error, for example “You killed it with this. THANK YOU”.

Source: r/FacebookAds thread on error 3858385

How to avoid it next time

• Turn on two-factor authentication on your profile, and require it for your business portfolio in Security Center (Meta Business Suite > Settings). Meta makes it a requirement for business portfolios that are 90 days or older and recommends it for everyone with access.
• Keep more than one person with full control of the business portfolio, so the portfolio is not stuck if one profile is locked.
• Review the ad account roles regularly and remove people who no longer need access.