A s(c|p)ammer is attempting to defraud our thousands of our users via Facebook. The attacker creates duplicate company pages and then shares public photos from people who like our page or friends of people who like our page.

Thousands of these pages have existed for days and are continuing to be created on a daily basis. Because the attack pages include photos of the users, they get a notification and many (quite reasonably!) become unsettled. Some cannot tell that it is not actually the real company.

Example page (this is my company's name and logo, but not us): https://spee.ch/@thumbnails/25be5a1dfd08bf7c.png

We tell our users to report the pages, but because each page is only reported by the user and us, many remain up.

We attempted to get a verified page by Facebook in the hopes this would grant additional protection (no idea if this is true), but were denied and told we can only re-apply in one month.

Is there anything else we can do to mitigate this?