Step-by-step method
A reproducible path from question to conclusion.
- 1
Classify the situation
Determine whether someone copied your identity, controls an existing account, uses your documents or is already contacting victims.
- 2
Preserve evidence
Keep the exact URL, handle, available identifier, full captures, received messages, dates, requested payment methods and direct witness accounts.
- 3
Secure legitimate access
From a trusted device, change affected credentials, review sessions, enable multi-factor authentication and verify recovery channels.
- 4
Use the correct report route
Use the platform’s official form, identify the authentic account clearly and retain the case reference. Avoid negotiating with the impersonator.
- 5
Warn without amplifying
Tell people who may genuinely be contacted which channel is official and what to ignore. Do not circulate the fraudulent link unnecessarily.
- 6
Track and escalate
Keep a timeline of reports, replies, new accounts and harm. Escalate to competent services when fraud, threats or material loss are active.
Separate technical urgency from reputation urgency
A compromised account first requires control and protection of linked access. A fake profile without access mainly requires preservation, reporting and reducing its effectiveness.
Where money, sensitive documents or personal safety are involved, contact the relevant bank, platform and competent authorities through official channels.
Make the report verifiable
A precise report includes both addresses, identifiers, type of impersonation, affected content and proportionate proof of legitimacy.
Keep each acknowledgement and date. A small tracking table prevents duplicate effort and supports escalation if the account returns.
Monitor reappearance proportionately
Define a few targeted checks for name variants, characteristic images, numbers, domains or repeated phrases. Review them at a frequency proportionate to risk.
After removal, document measures taken and make official channels easy for contacts to recognise.
What to check and what to record
Use this grid to turn the method into a reviewable case file. A missing item remains an open question. The interpretation limit prevents a finding from becoming an unsupported conclusion.
| Check | Useful record | Interpretation limit |
|---|---|---|
| Fake profile | URL, stable identifier, captures and official comparison account. | Distinguish imitation, parody and actual account compromise. |
| Report | Relevant category, ticket reference and submission date. | Do not publish private data collected for the case. |
| Warning | Authentic channel, concrete instruction and affected recipients. | Repeating the fake content can amplify its reach. |
Common pitfalls
Four shortcuts that weaken the result.
Contacting the fake account
It can reveal your strategy or cause evidence to disappear.
Publishing every capture
This may expose victims and increase visibility.
Using a similar replacement password
Recovery should cover linked accounts and fallback methods.
Forgetting contacted victims
Their messages and timelines may be important evidence of harm.
Practical questions
Frequently asked questions.
Should I reply to the fake profile?
Usually not. Preserve the material and use official channels unless a competent professional directs otherwise.
What should contacts be told?
State the official channel, the approach to ignore and a safe way to send relevant evidence without public reposting.
When is prompt professional help appropriate?
During active fraud, threats, blackmail, identity-document misuse, compromise or serious personal harm.
Public references
Cybermalveillance.gouv.fr. Account compromise guidance; an established profile can be misused.
Editorial scope
Published by Internet Intelligence Service on 15 September 2026. Last content update: 7 October 2026. This educational guide describes a lawful, defensive method. It is not legal advice, an emergency service or authority instruction.