What to Do If Someone Is Impersonating You Online

Online impersonation — when someone creates a fake profile, website, or account pretending to be you — is a growing problem in 2026. Whether it's a fake social media account using your photos, a scammer posing as you to defraud your contacts, or someone using your identity for harassment, the damage can be real and lasting. Here's exactly what to do if you discover someone is impersonating you online.

Signs Someone Is Impersonating You

You might discover online impersonation in several ways:

• Friends, family, or colleagues tell you they received strange messages from "you" on a platform where you don't have an account — or from a duplicate account.
• You find a social media profile using your name, photos, or bio that you didn't create.
• You receive notifications about account activity on platforms you've never used.
• A Google search of your name reveals profiles, websites, or content you didn't create.
• Someone is using your photos on dating apps or other services.
• Business contacts report receiving emails from a domain that mimics your name or company.

Immediate Steps to Take

1. Document Everything

Before anything else, take screenshots of the impersonating account or content. Capture:

• The profile page with the username and URL visible
• All posts, comments, and messages from the fake account
• Any evidence showing they're using your photos, name, or personal information
• Timestamps on all content

Save these screenshots in a secure location. This evidence is critical if you need to escalate to law enforcement or pursue legal action. Impersonators may delete their accounts once they realize they've been discovered, so documentation must come first.

2. Report to the Platform

Every major platform has a process for reporting impersonation:

• Facebook/Meta: Use the "Report" button on the profile, or go to the Help Center and select "Report a profile or Page pretending to be you or someone else." Facebook allows you to report even if you don't have an account.
• Instagram: Use the in-app reporting function or the online form for impersonation reports. You may need to provide a photo ID.
• X (Twitter): File a report through the Safety and Security settings. You or an authorized representative can report accounts posing as you.
• LinkedIn: Report the profile as fake through the "More" button on the profile page.
• TikTok, YouTube, Snapchat: Each has dedicated impersonation reporting forms accessible through their help centers.

When reporting, use clear language: state that you are the real person, the account is using your name and/or photos without permission, and you did not create or authorize this account.

3. Alert Your Contacts

Immediately warn your friends, family, and professional contacts that a fake account is impersonating you. Post a warning on your real social media accounts and send direct messages to close contacts. This is especially urgent if the impersonator is messaging your contacts — they may be running a scam, asking for money, or soliciting sensitive information while pretending to be you.

4. Secure Your Real Accounts

An impersonation attempt may be connected to a broader effort to compromise your identity. Take these precautions:

• Change your passwords on your real accounts, starting with email.
• Enable two-factor authentication (preferably using an authenticator app, not SMS) on all accounts.
• Check for unauthorized access — review recent login activity, connected devices, and session history on your accounts.
• Review your email forwarding rules to make sure no one has set up auto-forwarding to an unknown address.

Report to Law Enforcement

If the impersonation involves financial fraud, threats, harassment, or other criminal activity, report it to law enforcement:

• File a police report with your local police department. Having a police report on file is often required by platforms and financial institutions to take further action.
• Report to the FTC at IdentityTheft.gov if the impersonation is connected to identity theft or fraud.
• Report to the FBI's IC3 (Internet Crime Complaint Center) at ic3.gov if the impersonation involves financial loss, extortion, or significant harm.
• Contact your state attorney general's office — many states have specific laws against online impersonation.

Remove the Information That Makes Impersonation Easy

Impersonators typically build fake profiles using information and photos that are publicly available online. The more personal data that's accessible about you, the more convincing a fake account can be. To reduce your vulnerability:

Remove Your Data From Data Brokers

People search sites publish your name, photos (sometimes scraped from social media), addresses, phone numbers, email addresses, and even names of family members. This is exactly the information impersonators use to make fake accounts look legitimate. Opting out of data brokers makes it harder for anyone to gather enough details to convincingly impersonate you.

Tighten Your Social Media Privacy Settings

Review the privacy settings on every social media platform you use:

• Set your profiles to private or friends-only where possible.
• Disable the ability for others to download your photos.
• Limit who can see your friends list, posts, and personal details.
• Remove personal information like your birthday, phone number, and location from public profiles.

Set Up Google Alerts for Your Name

Create a Google Alert for your full name (in quotes) and variations of your name. This will notify you by email whenever new content mentioning your name appears on the web, helping you catch impersonation attempts early.

Regularly Search for Yourself

Periodically search for your name on Google, social media platforms, and people search sites. Look for accounts, profiles, or content that you didn't create. The sooner you discover impersonation, the faster you can shut it down.

Legal Options

Depending on where you live, you may have legal recourse against impersonators:

• Many states have anti-impersonation laws that make it a crime to impersonate someone online with the intent to harm, defraud, intimidate, or threaten.
• The Computer Fraud and Abuse Act (CFAA) may apply if the impersonator gained unauthorized access to your accounts or data.
• Defamation and tortious interference claims may be available if the impersonation damaged your reputation or business relationships.
• Consult with an attorney who specializes in internet law or cybercrime if the impersonation is causing significant harm.

Don't Engage With the Impersonator

As tempting as it may be to confront the person behind the fake account, avoid direct contact. Engaging with them can escalate the situation and give them more information about you. Instead, focus on documentation, platform reporting, and law enforcement — and reduce your online exposure to make future impersonation attempts harder.