You're right about it existing, but FB could definitely fight it, removing 90% or more. But sadly it generatesa LOT of extra revenue for them (stolen account with stolen CC = thousands spent on ads) so they have monetary incentive to turn a blind eye and let people get scammed.
