How to Respond When Someone Impersonates You Online

Discovering that someone is pretending to be you online can be frightening, especially when the person is using your name, photos or reputation to contact friends, collect money or spread false information. The situation can become more serious if the impersonator targets your work, business, bank-related identity or social media audience.

Act quickly, but do not panic or engage in a public argument. Your first priorities should be to preserve evidence, secure your genuine accounts, warn people who may be contacted and report the fake profile through the platform’s official process.

What online impersonation means

Online impersonation happens when someone presents themselves as you or falsely suggests that they represent you. This may involve:

• Creating a social media account with your name and photographs.
• Copying your biography, business details or public posts.
• Messaging your contacts while claiming to be you.
• Requesting money, airtime, gifts, passwords or other sensitive information.
• Advertising jobs, investments, products or services in your name.
• Publishing offensive, fraudulent or misleading content that could damage your reputation.

A copied profile is not always designed to steal money immediately. Some impersonators are trying to build trust first. That is why even a profile that appears harmless deserves attention if it falsely represents you.

First, confirm what has happened

Before accusing someone, check the account carefully. Look at the username, profile link, creation history, photographs, spelling and recent activity. A fake account may use a slightly different username, such as an extra full stop, underscore or number.

Ask a trusted person to view the profile as well. This can help you confirm what the public sees and preserve evidence if the impersonator later blocks you or deletes the account. Do not log in to unfamiliar links sent by the account, and do not download files or applications it recommends.

Preserve evidence before reporting

Take screenshots and save the direct link to the fake profile or post. Capture enough of the screen to show the account name, username, photograph, message, date and any request for money or personal information.

Also preserve:

• Messages sent by the impersonator.
• Phone numbers, email addresses or payment details they used.
• Names of people who received the messages.
• Posts, comments, adverts or stories published by the fake account.
• Dates and times when you discovered or received reports about the activity.

Keep the original files where possible rather than editing or cropping every copy. Store them in a safe folder or cloud account that the impersonator cannot access. Evidence may be useful when reporting to the platform, warning contacts, protecting your business reputation or making a report to an appropriate authority.

Secure your real accounts

Impersonation does not always mean your account has been hacked. Someone may simply have copied information that was publicly available. However, check your security immediately because the impersonator may also be trying to access your genuine account.

1. Change your password if it is weak, reused or exposed. Use a different password for each important account.
2. Turn on two-step verification or multi-factor authentication where the service provides it.
3. Review active sessions and logged-in devices. Sign out of devices you do not recognise.
4. Check your recovery email and phone number. Remove changes you did not make.
5. Review connected apps. Revoke access for services you do not recognise or no longer use.
6. Check recent messages and posts for activity you did not create.

Never share your password, personal identification number, one-time password, authentication code or recovery phrase with anyone claiming to help you remove the fake account. A real platform representative should not need these secrets.

Report the fake profile through the platform

Use the platform’s built-in reporting option and select the category that best matches the problem, such as impersonation, fraud, harassment or identity misuse. Provide the direct profile link and explain clearly that the account is pretending to be you without permission.

If the platform asks for identity verification, use only its official app or website. Be cautious of people who contact you privately and promise to remove the account for a fee. They may be another scammer taking advantage of your situation.

Ask trusted friends or colleagues to report the fake profile too, but do not encourage harassment or mass abuse. Accurate reports are more useful than angry messages, threats or repeated false complaints.

Warn your contacts quickly

If the impersonator is contacting people who know you, publish a short warning through your genuine account. Keep it factual and easy to understand:

“A fake account is using my name and photos. It is not operated by me. Please do not send money, share personal information or follow links from that account. Report and block it, and contact me through my usual channel if you receive a suspicious message.”

Share the fake account’s link only when necessary. Repeatedly reposting the profile can give it more visibility. If the impersonator has targeted a workplace, school, customer group or community, notify the relevant administrator privately so they can warn members without spreading the account further.

If money or sensitive information is involved

Tell anyone who interacted with the impersonator to stop communicating and avoid sending more money. If a person has already transferred funds or disclosed banking details, they should contact their bank or payment provider immediately through an official channel. They should also change affected passwords and monitor their accounts.

Do not try to recover money by paying a stranger who claims to be a “recovery agent”. Scammers often target victims a second time with promises to trace the person, hack the account or obtain a refund.

Where the conduct involves fraud, threats, blackmail, harassment or significant financial loss, preserve all evidence and consider reporting it to the appropriate law-enforcement or cybercrime authority in your location. If you are in Nigeria, use verified official contact channels rather than phone numbers posted by unverified social media accounts.

Reduce the information an impersonator can copy

You cannot control everything people see online, but you can make impersonation more difficult and easier to detect.

• Review who can see your friends or followers list.
• Limit public access to your phone number, email address, home address and routine locations.
• Remove old public posts that reveal security questions or travel plans.
• Use a consistent public handle across important platforms where practical.
• Consider adding a clear official link to your website or main social profile.
• For a business or creator brand, explain which accounts are official and how customers can verify them.

A verification badge may help on some platforms, but it is not a complete security solution. Your audience should know your normal payment process and understand that you will not request passwords, OTPs or unexpected transfers through private messages.

A simple response workflow

When time matters, follow this order: confirm, capture, secure, report, warn and escalate. Confirm the fake account, capture evidence, secure your genuine accounts, report the impersonator, warn likely targets and escalate serious fraud or threats through appropriate official channels.

After the immediate problem is handled, search occasionally for new fake accounts using your name, business name or common username. Set up alerts where available, and ask close contacts to tell you if they receive an unusual request.

The most effective response is calm and documented. Do not give the impersonator more personal information, publicity or emotional reactions than necessary. Protect your accounts, help your contacts recognise the scam and keep enough evidence to support a proper report.