It is not that difficult to steal social media accounts and real money from potential victims. All that needs to happen is for people to be careless with their personal information, which opens them up to becoming victims of fraud – no hacking required.
Use a secure and reputable email provider for Facebook account recovery. Gmail and Yahoo Mail are the usual options but may not be secure enough and are also often targeted for account takeover.