Once the victim enters their credentials, the data is captured by the Xploitz server and sent to the person who generated the link. Risks to the "Hacker"

When the victim clicks the link, they are presented with a fake login page that looks nearly identical to the official Facebook login.

Gaining access to an account without permission is a criminal offense that can lead to fines or imprisonment.