Facebook Lookup — Find Profiles by Email or Phone
Discover Facebook accounts linked to a known email address or phone number. Vestigo uses Facebook's public account recovery endpoint to surface publicly visible profile data — no login, no scraping.
How Facebook Lookup Works
Facebook exposes an account recovery endpoint through its public GraphQL API — the same mechanism used when you click "Forgot password?" and enter your email or phone. Vestigo queries this endpoint to determine whether a Facebook account is registered to a given identifier.
When a match is found, Facebook returns limited public profile information: the display name, a redacted profile picture, and enough context to identify the profile. This is publicly accessible data, not private account information.
What You Can Find
From an Email
Check whether a Facebook account exists for a given email address and retrieve the public display name
From a Phone Number
Check whether a Facebook account is registered to an international phone number in any format
Profile Link
Get a direct link to the public Facebook profile page when a match is found
Account Status
Determine whether the number or email has no Facebook account — useful for negative confirmation
Use Cases
OSINT investigators use Facebook lookup to pivot from a known email or phone number to a real identity. Starting with a business email found in a data breach, an investigator can often surface the person's public Facebook profile with full name and profile picture.
Fraud analysts verify whether a suspicious phone number or email has a Facebook presence, which helps distinguish real users from synthetic identities. Journalists use it to verify contact information for sources and identify individuals in connection with investigations.
Privacy & Limitations
Facebook's privacy settings affect what Vestigo can retrieve. Users who have disabled phone/email search in their Facebook privacy settings will not appear in lookups. The information returned is strictly limited to what Facebook makes publicly accessible through its account recovery flow.
Vestigo does not access messages, friends lists, posts, or any authenticated content. All queries use only the public, unauthenticated GraphQL endpoint.