Social media profile impersonation
In plain terms
An account uses your name and your photos to message people you know while pretending to be you. Your account isn't hacked: it's copied, which is why you never noticed anything.
Definition
Profile impersonation is the creation of an account reusing a real person's name, photograph, and public information, to deceive their circle or harm them by posting under their name.
How it works
Nothing is compromised: the name, profile photo, and list of public followers are enough to build a convincing copy within minutes. The fake account then sends a connection request to the original's contacts, who accept because they recognize the face and assume it's a second account or a switch of platform. Then comes the targeted message — an urgent request for money, a link, a conversation designed to extract information. One variant isn't aimed at defrauding but at causing harm: the fake account posts remarks attributed to the person, producing reputational harm that the victim discovers through people close to them. The impersonated person has no signal on their own account, which explains the delay before discovery.
Warning signs
- People close to you report a connection request you never sent
- An account bearing your name, recently created, with few posts
- Photos copied from yours, often at reduced quality
- Messages sent in your name that you can't find in your own messaging
- A slight variation in the username: a doubled letter, an added dot, a trailing digit
How to verify
First check your own account's login history: if it's normal, your account isn't compromised, it's copied — and the response isn't the same. Then compare the usernames character by character and check the fake account's creation date.
What to do
Warn your contacts with a post from your genuine account: this is the fastest and most effective action, since it neutralizes the fake account before any takedown happens. Then report the account to the platform as impersonation, a procedure generally handled as a priority when the impersonated person triggers it themselves.
If it already happened
Preserve screenshots of the fake account and of messages sent in your name, then file a police report: digital identity theft is a criminal offense. If people close to you sent money, they should contact their bank without delay and file their own police report. Strengthen the privacy of your contact list, which is the starting material for this technique.
Frequently asked questions
- Has my account been hacked?
- Usually not. Impersonating a profile requires no access to your account at all: it simply copies what's public. Still check your login history, since both situations can coexist.
- The platform refuses to remove the fake account.
- Insist by reporting from a verified account and using the "identity theft" reason, which follows a different track than a generic report. A police report, forwarded to the platform, strengthens the request. In the meantime, warning your contacts remains the most effective step.
Related attacks
Official sources
Also known as: fake profile, account cloning, fake account in my name.
This article is part of the Blackmail, harassment and personal harm family. Last updated: 2026-09-02.