Online impersonation occurs when an actor presents an account, page, domain, or communication as connected to another person or organization. The activity may support fraud, credential theft, counterfeit sales, misinformation, or reputational harm.
Common warning signs
Look for near-match usernames and domains, copied logos and biographies, urgent payment requests, unofficial customer support, fake recruitment, and links that redirect to unfamiliar services.
Assess the risk
Prioritize cases involving active consumer contact, financial requests, credential collection, executive impersonation, safety concerns, or rapid audience growth. Preserve the content before notifying the actor or platform.
Build the evidence record
Capture URLs, account identifiers, profile history, linked domains, messages lawfully provided by recipients, timestamps, and the authentic brand or identity reference. Avoid collecting unrelated personal data.
Coordinate the response
Platform impersonation reports may be combined with domain abuse, trademark, fraud, security, or law-enforcement escalation where supported. Customer communications teams may also need to publish verification guidance.
Track connected accounts, reused contact details, and destination domains. Removing one profile may not address the broader campaign.