A loan officer sets up a Facebook presence to connect with friends & colleagues, communicate with consumers on a more personalized level, all with the ultimate hope of generating leads and referrals. The premise is simple enough. But which type of Facebook account did they create? Has that account, its features, its category, evolved over time?
Facebook was founded in 2004, which means the platform is over 20 years old today. The platform has evolved tremendously and Meta, Facebook & Instagram’s parent company, has spent the past several years in particular quietly, but significantly, restructuring how Facebook accounts work.
As of 2026, there are four (4) distinct account types available, each with different visibility settings, analytics access, advertising capabilities, and admin structures. This is in part due to some legal suits and sessions in front of congress where Facebook was pressed on its consumer privacy protections and how it sells user data. For most users, the differences between account types are a matter of convenience and feature access. For financial institutions, the differences can carry various compliance implications — particularly around advertising oversight, required disclosures, and the ability of your compliance team to actually monitor what's being posted.
Before getting into the compliance implications, your team needs to understand what each account type actually is — because the distinctions are not always obvious from the outside. There are two (2) main categories of account types: Facebook Personal Profiles & Facebook Business Pages. The four (4) types of accounts within these two (2) categories are as follows:
Facebook Personal Profiles: administrative access cannot be granted and API providers cannot access account data.
Facebook Business Pages: administrative access can be granted and API providers can access account data.
Telling one account apart from another can be a confusing task. Meta has determined that in order to keep ad revenue flowing, consumer/user engagement with business pages must not falter. In an effort to spark continued engagement, Meta has taken to styling Business Pages more similarly to Personal Accounts than ever before – allowing navigation items like “Education” and “Hobbies”, that were previously a Personal Profile exclusive, to exist on Business Pages as well. The below matrix of features can be utilized when attempting to determine the account type and employee is using.
Note: Facebook continually makes updates to the account types and the features displayed with little to no warning to account holders or API customers. This feature matrix may be subject to change.
The compliance concern is not abstract. It runs along the practical lines of monitoring access and advertising oversight to ensure examination readiness.
Automated Monitoring Access: If a loan officer is posting business-related content from a personal profile — even in professional mode — your compliance team has no administrative access to that account and cannot access it via an API monitoring provider. Page content cannot be automatically archived to meet regulator record retention requirements, profiles cannot be scanned for required disclaimers, content oversight is non-existent. A business or creator page, by contrast, allows institution’s to automatically monitor pages through an API provider, giving your monitoring tools a structured integration point. This is the operational foundation of any serious social media compliance program.
Business Purpose Advertising Oversight: The FFIEC Social Media Guidance establishes that financial institutions are responsible for the content of their employees' business-related social media activity. Business-related social media activities are not just relegated to business pages, but can extend to personal profiles if they are used for “business purposes” – such as posting advertisements for services or even just promoting the job role they hold in their employment section. Account types often shape the workarounds employees are likely to attempt.
Here is a scenario your compliance team may not have anticipated: a loan officer has done everything right. They set up a business page, not a personal profile. But Facebook's own API is misclassifying it. There is a known bug in Facebook's API where the system internally categorizes a business page as a personal profile. These pages do not show in the traditional Facebook Page search.
The tell is in the URL — if a page's web address contains “profile.php” rather than a named handle or clean page URL, that page has likely been affected. The exact cause is not fully documented nor outlined by Facebook, but the most likely explanation is that the bug was introduced during a period when Facebook was migrating business pages between templates to what is known as the New Pages Experience — a transition that, for some accounts, appears to have corrupted how the page is registered in Meta's backend.
The practical consequence is significant: pages affected by this bug are typically not discoverable through Facebook's API and cannot be monitored by third-party compliance platforms. From your monitoring tool's perspective, the page effectively does not exist — even though it is publicly visible and actively posting content.
For a compliance team that believes it has full visibility into its loan officers' Facebook activity, this bug creates a blind spot that is easy to miss precisely because nothing looks wrong from the outside. The page is up, content is publishing, and your institution has admin access. What you may not have is any of that content flowing into your monitoring queue.
The Fix Is Straightforward — But Requires Action
The good news is that this bug has a reliable resolution. We have found that if the page holder updates the Username field — the account handle that appears in the page URL — Facebook's system re-registers the page correctly, removes the “profile.php” segment from the URL, and restores API accessibility. The page becomes discoverable and can be connected to third-party monitoring tools as expected.
This is a one-time fix, but it requires the page owner to take action. It cannot be resolved without the page holder's involvement, which means your compliance or marketing operations team needs a clear process for identifying affected pages and walking loan officers through the correction. ActiveComply’s Facebook Business Page walkthrough video easily demonstrates how users can make these updates:
ActiveComply video walkthrough — Editing a Facebook Business Page
Social media governance isn't about restricting your loan officers' ability to market — you want your sales team to feel enabled to go out and meet consumers and serve their communities needs. It's also about making sure the infrastructure behind that marketing can survive an exam without overly taxing compliance and operations teams with intensive manual labor where monitoring gaps are bound to emerge. Knowing what type of Facebook account your team is using, and confirming that those accounts are actually reachable by your monitoring tools, is where that work starts.