But this will no doubt be tied to that access token and so can trivially be separated from the "real" activity by Facebook. What you should be doing instead is have like a Chrome extension or Userscript that does the liking from the user's own browser, indistinguishable from the real activity.