AARP Hearing Center
Key takeaways
- Impostors can create convincing fake social media profiles using your photos and personal details, often without your knowledge.
- Each platform offers specific tools to report impersonation, but processes differ and may limit who can file a complaint.
- Strong passwords, multifactor authentication and alerting contacts quickly can help prevent or limit account misuse.
The spread of falsehoods in cyberspace is disturbing enough, but when your own social media account is being faked, it is especially damaging.
Worse, you may not know that an impostor is pretending to be you. But you’ll probably start hearing from friends and followers who weren’t fooled when they saw highly inappropriate messages or urgent pleas for money being made in your name. Sometimes they’ll see a request to connect to the cloned account when they’re already friends with the original you.
Cloned social media accounts, different from other accounts that may have been hacked, can be scarily convincing, especially since your original account may remain intact and untouched. Indeed, a crook may hijack your profile picture, other images and biographical details from your original account.
“More people have their guard down or are more open to clicking on links, providing information or even providing money if the request comes from someone they know,” says Mona Terry, chief victims officer at the Identity Theft Resource Center (ITRC) in San Diego. The nonprofit educates consumers on the risks of identity theft and offers free services to help victims recover.
Social media is the third-highest reported type of account takeover, behind email and cellphone takeovers, according to the ITRC.
The good news is that, despite its prevalence, social media account takeovers are down 30 percent from 2024.
It’s not clear why the numbers are decreasing, but Terry suggests it all comes down to what type of access benefits criminals the most.
“The scammers are going to go where they feel like they’re being most successful,” she says. “Accessing a social media network is great, but if you can access someone’s cellphone, they can get access to multiple accounts, not just social media.
Protecting your account
Of course, you want to avoid getting hacked in the first place. Employ strong passwords you don’t repeat elsewhere, take advantage of multifactor authentication options in which sites send a one-time code to your smartphone for you to type in, and practice good security hygiene across all your accounts.
You can’t assume that social media companies will catch the bad guys before they wreak havoc. The companies say they are trying.
Join Our Fight Against Fraud
Here’s what you can do to help protect people 50 and older from scams and fraud:
- Tell lawmakers to stop criminals from using crypto kiosks to steal from us.
- Sign up to become a digital fraud fighter to help raise awareness about the latest scams.
- Read more about how we’re fighting for you every day in Congress and across the country.
- AARP is your fierce defender on the issues that matter to people 50-plus. Become a member or renew your membership today.
LinkedIn, for example, says that in the first six months of 2025, its automated defenses blocked 97.1 percent of the fake accounts it shut down. The remaining 2.9 percent were stopped by manual investigations and restrictions, according to LinkedIn’s latest Community Report.
The company says it continues to enhance its defenses to prevent and remove malicious accounts.
If you find your account has been compromised or cloned, the first thing to do is try to recover it, Terry says. Thieves will typically try to change the recovery email and phone number for the account to their own so the account’s original owner can’t recover it.
Also, alert your friends and contacts that the account has been infiltrated or copied. Report the issue to the social media company as soon as possible. Here are some of the ways to do that.
No account? You can out a Facebook impostor
1. Go to the fake profile if you have a Facebook account. If you can’t find it, try searching for the name on the profile, or ask your friends to send you a link, Facebook says.
2. Click or tap the ellipsis ⋯ in the gray rounded box under the cover photo on the right and select Find support or report.
3. Select the problem in the Report box that comes up. Relevant here are Pretending to be someone, Fake account or Fake name.
4. Follow the on-screen instructions to file a report.
Facebook parent Meta will also let you report an impostor account even if you don’t have a Facebook account or have lost access to your account.
1. Visit the Facebook Help Center on a computer or the Help Center in the Facebook app on Android or iOS.
2. Tap Report an impersonating page or account if you didn’t get to that page directly.
3. On the Report an Impostor Account form, click or tap either Someone is using my email address on their account, Someone created an account for my business or organization, or Someone created an account pretending to be me or a friend.
4. Click Yes or No when asked if you have a Facebook account.
5. Click Send.
More From AARP
How I Lost My Life Savings in 76 Days
A romance scammer stripped this journalist of his financial security
AI Makes It Next to Impossible to Detect Scams
Consumers face unprecedented challenges as criminals use new tech to cheat and steal
Quiz: Protecting Yourself From Identity Theft
Test yourself on securing your financial accounts, the safest ways to pay, and more