Fake Profiles Pretending to Be You: How to Report and Respond

Finding a profile that uses your name and photo but isn't yours is unsettling. Sometimes it's a harmless fan page. More often an impersonating account is used to message your friends, colleagues or followers, ask them for money, or send them suspicious links while trading on the trust they have in you.

The good news is that major platforms prohibit this, and most have a reporting path built right into the profile. The steps below help you respond calmly and in the right order: confirm what's happening, collect evidence, report, warn the people you know, and lock down your real accounts.

If anyone threatens your safety, skip ahead. Call 911 or your local police first, and come back to the platform steps afterward.

First, figure out what you're dealing with

There are two different problems that can look similar from the outside.

• A copycat account. Someone has created a new profile with your name, photo or bio. Your own account still works normally.
• A hijacked account. Someone has taken over your real account. The Federal Trade Commission lists signs such as not being able to log in, getting notifications about username or password changes you didn't make, logins from devices or places you don't recognize, and friends or family getting messages you didn't send.

If it's a hijacked account, follow the platform's account recovery steps and the FTC's recovery advice before anything else, since that is the account people already trust. If it's a copycat, keep reading.

Collect evidence before you report

Reports sometimes lead to fast removals, and once the account disappears, so does your proof. Before reporting, spend a few minutes documenting it:

1. Copy the impersonating profile's web address, not just its display name. A display name may not be unique; the address or handle pinpoints the exact account.
2. Take screenshots of the profile page, the photo, the bio and any posts.
3. Ask anyone who received messages from the account to send you screenshots that show the sender and the date.
4. Write down when you found it and any related accounts on other platforms.

Keep these in one folder. You may need them for a second report, an appeal or, if it comes to that, a police report.

Report it on the platform

Report through the platform's own tools, and use its official help center for the current steps. Two examples from official help pages:

• LinkedIn. Its help center defines a "fake account" as one where "someone creates a phony profile or impersonates another person." To report one, go to the profile, click the More icon, select Report/Block and follow the on-screen instructions. LinkedIn also says that when you report another member's content, "they won't be notified who reported them."
• YouTube. YouTube's impersonation policy says it "does not allow unauthorized impersonation of a person, entity, or channel that may mislead viewers." Its examples include channel names or handles that are visually similar to an established one and deceptive misspellings. If your channel is being impersonated, the policy says you can report the channel. If you find your personal information or AI-generated content mimicking your likeness or voice without your consent, it points you to a privacy removal request instead.

Most other platforms have a similar option, usually in a menu on the profile itself. Choose the reason that matches what's happening, typically something like "pretending to be me" or "impersonation," rather than a general spam report. Be aware that platforms weigh context; YouTube, for example, says that when it evaluates privacy removal requests it considers factors such as whether the material is parody or satire.

If the account keeps reappearing, report each new one and keep adding to your evidence folder.

Warn the people who might be targeted

Impersonators usually go after your contacts, not you. A short, calm post or message helps. The FTC's advice for hacked accounts is to tell friends "not to click on links in emails from you and to ignore pleas for help or money," and the same idea applies to a copycat.

Something simple works: "There's a fake account using my name and photo. I'm not sending anyone requests for money or links. If you get a message from it, please don't reply, and report it." Post it from your real account on the affected platform and send it directly to the people most likely to be contacted, such as family, clients or coworkers. Asking a few of them to report the fake account as well can help.

Lock down your real accounts

A copycat is a good reminder that your real accounts are worth protecting, because a hijacked account is far harder to explain away than a fake one. The Cybersecurity and Infrastructure Security Agency notes that if your password is compromised, "someone else may be able to access your account and pretend to be you."

• Turn on multifactor authentication. CISA lists using multifactor authentication and a password manager among the core steps everyone should take. Look in your account's security settings; the FTC notes the option may be called two-factor authentication or two-step verification.
• Use a strong, unique password for each account, especially your email, since email is often how other passwords get reset.
• Check your account recovery email addresses and phone numbers, as the FTC recommends, and remove any you don't recognize or no longer use.

Make your profiles harder to copy convincingly

You can't stop someone from copying a public photo, but you can make a fake easier to spot and less useful.

• Keep your real profiles consistent, with the same name, photo and link, so people can compare. Our guide Consistent Profiles Across Platforms: Names, Handles and Links covers this in detail.
• Limit personal details. CISA warns that "using information that you provide about your location, hobbies, interests, and friends, a malicious person could impersonate a trusted friend." Review what's public and use each platform's privacy settings.
• Let people know how you do and don't contact them. A line such as "I'll never ask for payment by message" in your bio or on your website gives people a simple test.

When to involve law enforcement

Impersonation can cross into crime, for example when it's used for fraud or extortion, or comes with threats. If you or someone else is in immediate danger, call 911 or your local police. For cyber-enabled fraud and scams, the FBI's Internet Crime Complaint Center describes itself as "the central hub for reporting cyber-enabled crime" and encourages people to file a report even if they are unsure whether it qualifies. Bring your evidence folder, and keep copies of any report numbers you receive.

Key takeaways

• Decide first whether it's a copycat account or your own account taken over; a hijacked account needs recovery steps first.
• Save the profile address, screenshots and messages before you report, since removed accounts take the evidence with them.
• Report through the platform's own impersonation option, using its official help center for current steps.
• Warn your contacts not to click links or send money in response to messages from the fake account.
• Turn on multifactor authentication and check your recovery details on your real accounts.
• For threats call 911 or local police; report cyber-enabled fraud to the FBI's IC3.

Sources - LinkedIn Help, Recognize and report spam, inappropriate, and abusive content — https://www.linkedin.com/help/linkedin/answer/a1344213 - YouTube Help, Impersonation policy — https://support.google.com/youtube/answer/2801947?hl=en - Federal Trade Commission, How To Recover Your Hacked Email or Social Media Account — https://consumer.ftc.gov/articles/how-recover-your-hacked-email-or-social-media-account - Cybersecurity and Infrastructure Security Agency, Cybersecurity Awareness Month — https://www.cisa.gov/cybersecurity-awareness-month - Cybersecurity and Infrastructure Security Agency, Staying Safe on Social Networking Sites (February 1, 2021) — https://www.cisa.gov/news-events/news/staying-safe-social-networking-sites - Federal Bureau of Investigation, Internet Crime Complaint Center (IC3) — https://www.ic3.gov/