Yeah this is a pretty typical thing. But if they're not misleading people, there's nothing Facebook could do. The only thing is Disney could file a takedown notice for trademark infringement.
The internet scam that I would run is having a free website that does something just barely useful enough to get people to sign up with a verified email. Then, since most people reuse their passwords for everything, I have millions of email + password that I can sell to the Russian mob.