New Facebook phishing scam targets people using Facebook’s Trusted Contacts feature. Attack initiates by an already compromised account of one of your friends, asking for urgent help to get back into his/her Facebook account. The attacker asks you to check your email for a recovery code and share with the attacker. In actual, the code you received is not the key to unlock your friend’s account, but instead, the attacker initiated “Forgot my password” request for your account in an attempt to hijack your account.
Source: https://thehackernews.com/2017/10/facebook-account-hacking-scam.html