What to Do If Someone Is Impersonating You Online

If someone is impersonating you online, document the fake profile or site first (screenshots, URLs and dates), then warn your contacts not to engage with it, and report it through the platform’s impersonation form. If the impersonator is using your personal information for fraud or to open accounts, report it to the FTC at IdentityTheft.gov and consider the FBI’s Internet Crime Complaint Center and your local police.

Many online impersonation cases are resolved through platform reports alone. If you’ve just searched “someone impersonating me online” after a friend flagged a fake account, the steps below are in the order that gives you the best chance of a quick, clean removal.

What counts as online impersonation

Online impersonation is anyone presenting themselves as you, or as your business, without permission. The common forms are:

• Cloned profiles that copy your name and photos, often to message your contacts.
• Fake business pages and listings that use your brand to take bookings or payments.
• Look-alike websites and email addresses with one letter changed or a different domain ending.
• AI-generated images, video or voice made to look or sound like you.
• Posts, reviews or comments written in your name to embarrass you or start arguments.

Parody and fan accounts that are clearly labeled usually aren’t treated as impersonation by platforms. What matters is whether people are likely to be misled.

First, collect the evidence

Do this before you report anything. Once a platform removes the account, or the impersonator deletes it, the evidence is gone.

1. Screenshot the profile. Capture the profile page, username, display name, bio and photos. Make sure the date and time are visible, or note them.
2. Copy the URLs. Save the exact link to the profile and to any posts or messages that matter. Usernames can change; the profile URL or account ID is harder to disguise.
3. Capture messages sent in your name. Ask anyone who was contacted to send you screenshots of what they received, including the sender’s details.
4. Keep a log. A simple document with dates, what you found, who you reported it to, and any reference numbers you received.
5. Save proof of your identity. Your real profile links and, where a platform asks for it, a photo of a government ID. You’ll need these for most reports.

Warn your contacts

Impersonators usually target the people who know you: friends, family, colleagues, clients. They ask for money, gift cards, login codes, or send links. A short, calm post on your real accounts, and a direct message to people most likely to be contacted, limits the damage.

Heads up: someone has set up a fake account using my name and photos. It isn’t me. Please don’t accept requests from it, reply to messages, or send money or codes. If it contacted you, a screenshot would help me get it removed. My only real account is this one.

For a business, send the same message by email to customers and post it where they already follow you. Keep it factual and avoid speculating about who is behind it.

Report it to the platform

Every major platform prohibits impersonation and has a dedicated report route. Use the specific impersonation option rather than a general “spam” report, so the right team reviews it. Processes change, so follow what each platform currently shows.

Platform	How impersonation reports work
Facebook and Instagram (Meta)	Report the account from its profile using the options menu and choose the option for pretending to be someone. If you don’t have an account, Meta offers a separate impersonation form, which asks for a photo of a government ID and the details of the fake account.
X	X has a dedicated impersonation report form in its Help Center. You don’t need an X account to use it. You say who is being impersonated, give the account’s username, and explain how it misleads people. An authorized representative can report on your behalf.
LinkedIn	From the fake profile, use the More menu, choose Report, and select the option for impersonation or a fake account. LinkedIn’s Help Center also has a route for reporting fake profiles. LinkedIn says it doesn’t tell the reported member who reported them.
TikTok	Report from the profile menu and choose the option for pretending to be someone, or use TikTok’s online impersonation report form, which works without an account.

If several people report the same account, it doesn’t hurt, but the report from the person being impersonated, with ID, usually carries the most weight. If a report is rejected, resubmit with clearer evidence, such as a side-by-side screenshot of your real profile and the fake.

Fake business listings and websites using your name

Impersonation isn’t limited to social profiles. Businesses and professionals also see fake Google listings, look-alike domains and copied websites used to take payments or harvest customer details.

Fake Google Business Profiles

You can report a fake listing directly from Google Maps. For listings that impersonate your business or use your name, phone number or website without permission, Google also provides a Business Redressal Complaint Form, where you give your details, the listing’s link and an explanation of why it’s fraudulent. Include a link to your real website and your verified profile.

Fake websites and look-alike domains

1. Look up the domain’s registrar and hosting provider using a WHOIS or RDAP lookup tool. The owner’s details are often private, but the registrar and host are usually listed.
2. Send an abuse report to both. Registrars and hosts have abuse contacts and typically act on phishing, fraud and clear impersonation, especially when you include screenshots and explain the harm.
3. If the site copies your text or photos, a DMCA takedown notice to the host is often the fastest route, as long as you own the copyright. Only file a DMCA notice for content you genuinely own.
4. If the site is phishing for passwords or payments, report it to Google Safe Browsing so browsers can warn visitors.

Disputes over a domain name itself, where someone registered your brand in bad faith, are usually handled through a formal dispute process and are worth discussing with a lawyer.

When it’s fraud, identity theft or harassment

A fake profile that copies your photos is a platform problem. It becomes a matter for the authorities when someone uses your identity to commit fraud, or when impersonation is part of a harassment campaign.

• Identity theft: the FTC at IdentityTheft.gov. If someone has used your personal information to open accounts, take out credit or commit fraud in your name, report it at IdentityTheft.gov. The FTC gives you an Identity Theft Report and a personal recovery plan, and the report helps you prove to banks and businesses that the activity wasn’t yours.
• Internet fraud: the FBI’s Internet Crime Complaint Center (IC3). IC3 is the FBI’s central point for reporting internet-enabled crime, such as an impersonator taking money from your contacts. Note that IC3 doesn’t contact people through social media or offer to recover money, so treat anyone claiming to be from IC3 in a message as a scam.
• Local police. File a report if you’re being threatened, stalked or harassed, or if a local crime is involved. A police report number can also help with platform escalations and banks.

If your financial information may be exposed, consider placing a fraud alert or credit freeze with the credit bureaus.

Deepfakes and AI voice clones

Impersonation now includes AI-generated images, video and cloned voices. Our guide to deepfake detection covers how to check a suspicious clip. A few general points:

• Report through the same routes. Most major platforms have rules against manipulated or synthetic media that misleads people, and against impersonation generally.
• Intimate deepfakes have a legal removal route. Under the federal TAKE IT DOWN Act, covered platforms must remove non-consensual intimate images, including AI-generated ones, within 48 hours of a valid request, and the FTC enforces that requirement. Google also has its own request process for these, covered in our guide on removing images from Google.
• Voice clones target your family and colleagues. Agree on a verification question or code word with close family, and tell finance teams to confirm any unusual payment request through a known number.
• Keep the original. Save the fake file and where you found it before reporting. Don’t share it further to “debunk” it, which spreads it.

A worked example

This is an illustrative scenario, not a real client.

Elena runs a small interior design studio. A client emails to ask why she’s requesting a deposit through a new payment app. Elena discovers an Instagram account using her studio name with one extra letter, her portfolio photos and her headshot, messaging her followers with a “limited booking offer”.

• First hour: she screenshots the profile, bio and three messages clients forward to her, saves the URLs, and starts a log.
• Same afternoon: she posts a short warning on her real Instagram and emails her client list, explaining that she never asks for deposits through direct messages.
• Next: she reports the account through Instagram’s impersonation option, attaching her ID, and asks two staff members to report it too.
• Because clients were asked for money: she files a report with IC3 and keeps the confirmation. One client who paid contacts their bank.
• Afterward: she registers her studio name on platforms she doesn’t use yet and sets up alerts for her business name.

The account came down after her report, but a second one appeared a week later. Because she had evidence and a log ready, the second report took minutes.

When to talk to a lawyer

Most impersonation can be handled through platform reports. Talk to a lawyer if the impersonator is posting false statements that damage your reputation or business, if you know or suspect who is behind it and want to pursue them, if there’s a trademark or domain dispute, or if platforms won’t act and the harm is ongoing. A lawyer can advise whether defamation, trademark or state impersonation laws apply, and can help request identifying information from platforms through the courts. We can’t give legal advice, but we can work alongside your lawyer on the reputation side.

How to prevent it happening again

• Claim your usernames. Register your name or brand on the major platforms, even ones you don’t plan to use, and point them to your main site.
• Get verified where it’s available. Verification badges help followers tell your real account apart, though eligibility and requirements vary by platform.
• Tell people how you’ll contact them. A line on your website or bio such as “we never ask for payment by direct message” makes fakes easier to spot.
• Monitor your name. Set up alerts for your name and brand, and search the main platforms every so often. Our brand monitoring service can watch for new profiles, listings and mentions for you.
• Secure your real accounts. Turn on two-factor authentication so the impersonator can’t take over your genuine profile.

If an impersonation incident has already spread, with fake posts circulating or media interest, see our guide on how to respond to a negative viral post, or our crisis management service for hands-on help. Candidates and elected officials face impersonation more often than most; our page on political reputation management covers the extra considerations.

Frequently asked questions

Is it illegal to impersonate someone online?

It depends on what the impersonator does. Creating a fake profile breaks the rules of every major platform, and using someone’s identity to commit fraud, harass them or obtain money is illegal. Some states also have specific online impersonation laws. A lawyer can tell you what applies in your situation.

How long does it take for a platform to remove an impersonation account?

It varies by platform and by how clear the evidence is. Some reports are handled within days, while others need resubmitting. Reporting through the specific impersonation route, with ID and screenshots, usually gives you the best chance.

Can I find out who is impersonating me?

Platforms generally won’t reveal account holders’ details without a legal process such as a subpoena. If you need to identify the person, for example to take legal action, speak to a lawyer.

What if the fake account is impersonating my business rather than me personally?

Use the platform’s route for businesses or brands, which often lets an authorized representative report. For fake Google listings, use Google’s Business Redressal Complaint Form, and for look-alike websites, report to the domain registrar and host.

Should I pay someone who says they can remove the fake account?

Be cautious. No one outside the platform can force a removal, and scammers often target impersonation victims with recovery offers. Report through official channels first.