What to Do if Someone Is Impersonating You on Facebook

Finding a Facebook profile that uses your name or photos can feel alarming, especially if it is contacting friends or asking for money. Acting promptly can limit confusion and help preserve evidence. The key steps are to report the impersonating account to Facebook, alert people who may be targeted, secure your own accounts, and take additional action if fraud or threats are involved. The right response depends on whether someone created a separate fake profile or gained access to the real account.

Confirm What Is Happening

First, determine whether the problem is a fake profile or a compromised account. An impersonator may create a new account using your name, photographs, or personal details. A compromised account is your existing Facebook account, which someone else can access and use.

Check the profile’s web address, account history, posts, and friends list. If you can still sign in to your account and the suspicious profile has a different profile URL, it is likely a separate fake account. If your real profile is posting unfamiliar content, sending messages you did not write, or has a changed password or email address, treat it as a possible account takeover and secure it immediately.

Do not assume a profile is fake solely because it looks unfamiliar. A friend may have opened a new account for a legitimate reason. If it is safe, verify through a separate, trusted method—such as a phone call or an in-person conversation—before taking further action.

Save Evidence Before Reporting

Record useful details before the profile disappears or changes. Take screenshots of the fake profile, its profile picture and cover image, relevant posts, messages, and any requests for money or personal information. Capture the profile’s URL and note the date and time. If the account contacted other people, ask them to save their own copies of messages as well.

• Copy the profile link: Open the profile and copy its web address. The URL can help identify the account even if its display name changes.
• Keep messages intact: Save the full conversation, including dates and the sender’s profile information. Avoid editing screenshots in ways that could remove context.
• Document financial losses: Keep payment confirmations, bank or payment-app records, emails, and any communications with the impersonator.
• Limit public sharing: Do not repost private information or publish accusations that could expose you or others to additional harm.

Evidence can help with a Facebook report, a bank or payment provider dispute, or a report to law enforcement. Store copies somewhere the impersonator cannot access, such as a secure device or account.

Report the Fake Facebook Profile

Facebook provides a reporting process for profiles that impersonate someone. Open the profile, select the menu button—often shown as three dots—and choose an option such as Find support or report profile. Follow the prompts and select the option indicating that the profile is pretending to be someone. Choose the person being impersonated and submit the report.

Menu labels and reporting screens can vary by device, app version, or region. If the profile is impersonating a friend or family member, that person can report it directly. If you cannot access the profile, or the in-product option is unavailable, use Meta’s Help Center and search for its instructions on reporting an impersonating account.

For general guidance, visit Facebook Help Center. Use Facebook’s official app or type the address yourself rather than following links sent by the suspicious account. A report should identify the specific profile and explain that it is using your identity without permission. Provide requested information truthfully; Facebook may ask for details or documentation to review the report.

Reporting does not guarantee immediate removal. Facebook reviews reports under its policies, and response times can vary. Keep the profile URL and evidence in case the account remains active or creates another profile. You can also ask trusted friends who received messages from the impersonator to report the account, but they should report what they personally observed rather than submit misleading or coordinated claims.

Warn Friends and Family

Let people know through a channel the impersonator cannot control, such as a phone call, text, email, or a post from your genuine account if it is secure. A brief warning can prevent someone from sending money, clicking a suspicious link, or sharing private information.

For example: “A fake Facebook profile is using my name and photos. Please do not accept requests from it, send money, share codes, or open links. Report the profile to Facebook. My real account is [link or other identifying detail].” Avoid including sensitive information, such as your home address or phone number, in a public post.

Ask recipients to verify unusual requests directly with you using a known phone number or another trusted method. Scammers may create a sense of urgency, claim to be stranded, or say they need a verification code. A legitimate friend should not need a Facebook login code, password, or gift-card payment.

Secure Your Facebook Account and Email

Even when the fake profile is separate from your real account, reviewing security settings is sensible. If you suspect that someone accessed your account, begin with Facebook’s official recovery process at facebook.com/hacked. Follow the prompts from a device and location you have used before, if possible.

1. Change your password: Use a long, unique password that is not used on other websites. Change it anywhere else it was reused.
2. Review active sessions: In Facebook’s security settings, check where the account is logged in and sign out of sessions you do not recognize.
3. Turn on two-factor authentication: This adds a second verification step when someone tries to log in. Use an authenticator app or another secure method available in your settings.
4. Check contact details: Confirm the account’s email address and phone number are yours, and remove unfamiliar information.
5. Secure your email account: Change its password, enable two-factor authentication, and review recovery details and forwarding rules. Email access can allow someone to reset other passwords.

Never share a password, one-time login code, or recovery code with someone who contacts you claiming to be Facebook support. Be cautious of messages that threaten account deletion or promise to remove an impersonating profile for a fee. Use Facebook’s own app, website, and Help Center to check account notices.

Respond to Scams, Identity Theft, or Financial Loss

A fake profile may do more than copy your appearance. It may solicit money, collect personal information, impersonate a business, or send malicious links. If someone has paid the impersonator, contact the bank, card issuer, wire-transfer service, or payment app immediately. Ask whether the transaction can be stopped or disputed, and follow the provider’s instructions. Speed matters, but reimbursement is not guaranteed.

If a scammer has your Social Security number or other sensitive identifying information, visit IdentityTheft.gov, the Federal Trade Commission’s identity-theft resource, for reporting and recovery steps. Depending on what was exposed, consider placing a fraud alert or security freeze with the major credit bureaus and checking credit reports for unfamiliar activity. A freeze can help restrict access to credit files, but it does not prevent every type of fraud.

For an online scam or cybercrime, a report may also be submitted to the FBI’s Internet Crime Complaint Center at IC3.gov. A report can assist authorities in identifying patterns, though it does not guarantee that money will be recovered or that investigators will contact the person reporting. Save the complaint confirmation and evidence.

If the impersonator is making credible threats, stalking you, publishing intimate images, or using your information to put you in immediate danger, contact local law enforcement. Call 911 in an emergency in the United States. Preserve messages and avoid confronting the person if doing so could increase the risk.

If the Impersonator Is Using Your Photos

Someone may copy a public photo without creating a full identity profile, or use a photo to make the fake account seem convincing. Report the account for impersonation and keep copies of the images and profile. If the photo is yours and you own the copyright, Meta may provide a separate intellectual-property reporting process. Copyright reports concern ownership of the image; they are different from reports that a person is impersonating you.

Do not assume that making every photo private will remove an existing copy. However, reviewing audience settings can limit what strangers can see going forward. Consider restricting older posts, reviewing who can search for or contact you, and removing public details that could help an impersonator answer security questions. These steps reduce exposure but cannot prevent all copying.

When a Child or Teen Is Being Impersonated

If the account targets a child or teen, an adult can help preserve evidence and submit a report, while avoiding public posts that reveal the child’s location, school, or contact information. Use Facebook’s current reporting options and review privacy settings together. If the account is grooming, threatening, extorting, or soliciting sexual images, do not negotiate or send money or images. Save the communications and contact law enforcement; immediate danger calls for 911.

In the United States, the National Center for Missing & Exploited Children accepts reports about suspected online child exploitation through its CyberTipline at report.cybertip.org. Its service is not a substitute for emergency services. For additional steps, consult NCMEC’s official guidance and the relevant platform’s reporting tools.

How to Reduce the Risk of Future Impersonation

No privacy setting can stop someone from creating a fake account, but a few habits can make impersonation less effective and limit the information available to a scammer.

• Review who can see posts, photos, friend lists, and profile details; set sensitive information to a limited audience.
• Use a unique password and two-factor authentication, and keep recovery email and phone details current.
• Be selective about accepting friend requests, especially from accounts that have little activity or duplicate the identity of someone already in your network.
• Tell friends and family to verify urgent requests for money or login codes through another channel.
• Search your name occasionally to spot suspicious profiles, while avoiding third-party services that ask for your Facebook password.

These precautions support account safety, but they do not shift responsibility for impersonation onto the person being targeted. If a fake profile appears, reporting it and documenting its activity remain the practical first steps.

What to Expect After You Report

Facebook may review the report and take action under its policies, but the outcome and timing depend on the case. The platform may remove the profile, restrict it, or determine that it does not violate its rules. A report does not necessarily provide a detailed explanation, and a decision can sometimes be reviewed through options shown in the app or Help Center.

If the profile remains active, check that the report was submitted for the correct account and keep a record of any new activity. Report additional threats, scams, or harmful content through the relevant options. Avoid paying anyone who claims they can guarantee removal or recover an account outside Facebook’s official processes. For financial fraud, identity theft, or threats, Facebook reporting should be treated as one step—not a replacement for contacting the relevant bank, government agency, or law enforcement authority.

Quick Action Checklist

• Save screenshots, the profile URL, messages, and relevant dates.
• Report the account to Facebook for impersonation.
• Warn friends through a trusted channel and tell them not to send money or codes.
• Secure your Facebook account and email if access may have been compromised.
• Contact a payment provider quickly if money was sent, and use IdentityTheft.gov or IC3.gov when appropriate.
• Contact local authorities for credible threats, stalking, or immediate danger.