When clicks turn into scams on Facebook ads