My price tracker for AliWatcher: https://aliwatcher.com/
Full of bugs, prices are not updated nearly enough, but decided to put it live anyway while I start working on it
Maybe the oauth scope requested edit access to the FB business manager? That way the scammer can remove OP from the business and add himself via the API