Someone Is Impersonating Me on Facebook: How to Report a Clone and What to Do When Facebook Ignores It

Cloned profile, fake Page, or hacked account? Know which Facebook problem you have

Facebook has three distinct impersonation problems, each requiring a different fix. Identify yours before you start.

Cloned profile

Your real account is untouched. You can still log in, your password works, your posts are all there. Someone simply built a second profile with your name and your photo and is working through your friends list. This is the most common case on Facebook, and it works because Facebook has no unique usernames. Anyone can register any name, so your face and your name are enough to pass at a glance. Everything below is written for this case.

Fake Page

Not a profile this time. Someone set up a Facebook Page carrying your name, or your business's name. Creators, public figures, and anyone with customers get hit with this one. A fake Page does not need your friends list at all. It reaches people through search, through ads, and through follows, which is why it can run for months before anyone tells you. Reporting works differently too: open the Page, use the ••• menu there, and report it as impersonating you or a business you represent. If it also carries your logo, your name, or your posts, file separately through Meta's trademark and copyright channels. Those run on their own track and tend to move faster than a standard report. Then apply for verification on your real Page, so anyone comparing the two can see which is which.

Hacked account

Different problem, and a more urgent one. You are locked out, or your password stopped working, or friends are seeing posts from your real account that you never wrote. Nobody built a copy of you. Somebody is inside the original. Go to facebook.com/hacked now, before anything else. A hacked account is worse than a clone because the attacker inherits everything: your history, your connections, your payment methods, and the credibility of an account your friends have known for years. The rest of this guide is about clones and fake Pages. It does not apply to a takeover.

If both things are happening at once, secure the real account first. Nothing else you do matters while someone else controls it.

How Facebook cloning actually works, and how victims find out

Almost nobody discovers a clone on their own. A friend messages to ask why you sent a second friend request, and that is the moment you learn. But that friend request was never a warning sign. It was the attack.

Facebook is where this scam lives, and the reason is structural. There are no unique usernames, so your name is not yours. Anyone can register it. Your profile photo is public by default. Your friends list often is too. Put those three facts together and a stranger has everything they need to build something that looks exactly like you: same name, same face, and the same mutual friends showing up underneath. Then they work down your friends list methodically, requesting everyone who is not already connected to the fake.

Acceptance is when the scam starts. A Messenger message arrives, and the script barely changes from case to case. An emergency. A relative stranded somewhere. A bill that has to be paid today. A prize with a small fee attached. An investment opportunity through a broker they just found. The scammer has no interest in your friends as individuals. What they are spending is your reputation.

By the time anyone tells you, the clone has usually been running for a while. Requests have gone out to dozens of people. Some accepted. Some of those replied. Every hour it stays up, it reaches further. Which is why the response has to move faster than the clone does, and why the order of the steps below matters.

Step 1: Save the evidence before the Facebook clone disappears

Do this first, before you report and before you tell anyone. Clones are disposable. The moment friends start pushing back, the scammer renames the profile, deletes it, or blocks you, and your proof disappears with it.

Save:

• The profile URL. Copy it from the address bar or from the profile's share option. It is the one thing about the clone that cannot be made identical to yours.
• Full screenshots of the profile. The name, the photos, the About section, anything lifted from your real account.
• The Messenger conversations. Ask anyone the clone contacted to screenshot the whole chat. Messages asking for money or gift cards are the strongest evidence you will get.
• Who was contacted, and when. If anyone paid, write down the amount and the method. Their bank will ask, and so will the police.

Facebook may ask for detail during review. Your friends will want proof. Any fraud claim will need documentation. Ten minutes now saves all of it.

Step 2: How to report someone impersonating you on Facebook

Facebook bans impostor profiles and Pages, and it lets you report one even if you have no Facebook account at all. Pick the route that fits your situation.

Option A: Report the fake profile from your account

1. Open the fake profile. If you cannot find it, search your own name, or ask the friend who spotted it to send you the link.
2. Click or tap the ••• button under the cover photo.
3. Choose Find support or report profile.
4. Select Pretending to be someone.
5. When it asks who the profile is pretending to be, choose Me. Choose A friend if you are reporting on someone else's behalf.
6. Follow the prompts and submit.

Your report is confidential. The impostor is never told who reported them.

Option B: Report an impostor without a Facebook account

If you are not on Facebook, or the clone has blocked you, use Facebook's impostor account form. It asks for your name, your email, and the fake profile's URL or name, and it may ask you to confirm your identity with a government-issued ID. Do the ID step. Identity-confirmed reports carry far more weight than anything filed anonymously.

Option C: Report a fake Page

If the impersonator built a Page rather than a profile, which is what usually happens to businesses and creators, open the Page, click •••, and report it as pretending to be you or a business you represent. If it is also using your name, your logo, or your posts, file a trademark or copyright report through Meta's IP forms. Those run on a separate track and often move faster.

Option D: Report the scam messages in Messenger

Anyone the clone messaged can report the conversation itself. Open the chat in Messenger, tap the fake account's name, and use the report option. One profile report plus several message reports is a stronger signal than a single flag on its own.

Step 3: Get your Facebook friends reporting too, and warn the clone's next targets

Your report is now sitting in a queue. The clone is not waiting for it. While Facebook decides, it is still working down your friends list, requesting everyone it has not reached yet. Warning your friends is not a courtesy. Right now it is the only thing actually stopping the scam.

Do this immediately, before Facebook acts:

• Post publicly, not friends-only. Name the fake profile. Attach a screenshot. Say it plainly: any second friend request from you is a scam, do not accept it. A friends-only post reaches people who are already connected to your real account, which means it reaches the people who are already safe. The ones in danger are outside that circle.
• Ask your friends to report the clone, not just ignore it. Give them the exact path: ••• on the fake profile, then Find support or report profile, then Pretending to be someone, then A friend. This matters more than it sounds. On Facebook, every person who received a request from the clone can file their own report, and each one is counted separately from yours. A clone reported by ten different people looks very different to Facebook than a clone reported once by the person it copied.
• Message the people who will never see the post. Parents, older relatives, the friends you rarely interact with. They are the most trusting targets and the least likely to be scrolling your feed. A direct message from your real account is much harder to miss.
• Tell people what you will never ask for. Money, gift cards, codes, wires. Saying it explicitly removes the hesitation later, when a message arrives from someone who looks like you.
• Do not message the fake profile. Confronting it tells the scammer they have been spotted, and gives them time to rename, delete, or block you before your report is reviewed. A report loses its target when the profile changes.

There is one flaw in every warning post, and it is worth knowing about. Facebook shows it to a fraction of your friends, and it sinks within days. The friend who accepts the clone two weeks from now will never see it. That is what the next step is for.

Step 4: Create a permanent safeguard your Facebook friends can always find

A clone moves through your friends list faster than a Facebook post travels. Your warning reached whoever happened to be scrolling. Your aunt in another city almost certainly was not, and neither were the friends who checked Facebook once that week. The clone is still sending requests to every one of them.

And taking the clone down does not remove the raw material. Your name, your photo, and your friends list are all still there. The same person can rebuild the same clone tomorrow morning.

An Anti-Scam Page sits at a fixed address that does not expire and does not depend on the algorithm. Your friends do not need to have seen your warning post to find it.

• It says what a real message from you looks like, and what you will never ask for. Any emergency request "from you" can be checked against it in seconds.
• It lists every real account and contact you actually use. Anything not on the page is not you.

Add the link in your bio and leave it there. Posts get buried and stories vanish. Your Anti-Scam page stays up, and it is still there the next time a clone appears.

Facebook Won't Remove the Clone: What to Try When Reports Fail

A rejection is not the end of the road, and neither is silence. Most clones that survive the first report are eventually removed through one of the routes below. Work through them in order.

Facebook rejected my ID: the name doesn't match

The impostor form asks for government ID to confirm you are the person being copied. The rejections mostly come down to one thing: the name on the ID does not match the name on the Facebook profile. A nickname. A married name that was never updated on the licence. The name you are known by professionally rather than legally.

What to do:

• Re-submit the form and say it directly in the description field: my legal name is X, I am known as Y on Facebook and in daily life, and Y is the name the fake profile is using.
• Attach a second document that shows the name you actually go by. A bank card, a professional credential, a utility bill.
• Make sure the ID photo is clear, uncropped, and readable, with no glare across the name.
• If it is rejected again, ask a friend to file on your behalf using A friend. They can confirm your identity from their own account without the name-match problem. Run the copyright route below at the same time.

Facebook said it "doesn't violate Community Standards"

Automated review returns this within minutes, on accounts that are transparently pretending to be someone. It is the most common thing victims run into, and it is a starting point rather than a verdict.

What to do:

• Appeal it if the option appears. An appeal is what moves the case from an automated decision to a human one.
• Re-report under a different category. Scam or fraud if the clone is asking your friends for money. Nudity or sexual content where applicable. Different categories are reviewed by different teams.
• Have your friends report it independently, each choosing Pretending to be someone, then A friend. Anyone who received a request from the clone has standing to do this, even if you personally have no Facebook account.
• Report the Messenger conversations, not only the profile. Every recipient of a scam message can flag the chat, and those reports follow a different path from profile reports.
• File the ID-verified impostor form if you have not already. It goes to a different queue and carries much more weight than an in-app flag.
• If the impersonation is a Page or a Marketplace seller account, report through the ••• menu on that Page or listing. They have their own report flows and their own reviewers.

The copyright route: file on every photo the clone stole from you

This is the route almost nobody tries, and it is often the one that works.

A cloner takes whatever is public. On most profiles that means the profile picture, the cover photo, and frequently entire albums that were set to public years ago and forgotten about. Every one of those images is copyrighted, and you own the copyright if you took the photo or published it.

Meta's intellectual property team handles copyright reports under legal obligations. They are a different team, on a different track, from the reviewers who told you the clone did not violate anything. An account that survived the impersonation process can still be dismantled by IP strikes.

• Use Meta's copyright report form in the Help Center, under "Report a copyright infringement."
• Start with the profile picture and the cover photo. Those are the two images the clone cannot work without.
• Then work back through the albums and the old posts. Each image is its own filing: a link to your original, and a link to the copy on the fake profile.
• Every successful filing strips an image from the clone and puts a strike against the account. Enough strikes and the account is suspended. A clone with none of your photos left cannot convince anybody it is you.
• If it is a Page rather than a profile, Rights Manager gives Page owners a faster route for repeated misuse of their photos and videos.

A Facebook clone is posting inappropriate or sexual content with my photos

When a clone starts posting sexualised content with your photos, your friends usually see it before you do. This case needs a different approach.

In this order:

• Report the profile and every individual post, photo, and album under Nudity or sexual content. Ask the friends who have already seen it to report the posts from their own accounts. Several post-level reports from different people reach review faster than one profile report.
• File copyright reports through Meta's IP form on every photo the account is using. Any image you published, or that was taken of you and shared, is one you can file on. Do this at the same time, not afterwards.
• If any of it is intimate imagery of you, use StopNCII.org. The service creates a hash of the image on your own device. Meta uses that hash to detect and block it across its platforms. The image itself never goes anywhere.
• If anyone in the images is under 18, use NCMEC's Take It Down at takeitdown.ncmec.org.
• Screenshot everything before you file. Posts, Messenger conversations, tagged photos. Content disappears quickly once the reports start. If friends received these images in Messenger, ask them to preserve those chats before they block the account.
• Threats or demands for money or more images is sextortion, and it is a crime. Take your evidence to the police. Do not pay. Do not send anything. Paying has never once ended it.

Full escalation: what to do when Facebook keeps rejecting your reports

Most clones are gone by the second step. If yours is not, work down this list.

1. Re-file the ID-verified impostor form with better evidence, and bring your friends in. Add screenshots of the scam messages your friends received, not just the profile page. While the review sits there, the clone is still requesting everyone it has not reached. Every friend who gets one of those requests can report it themselves through Pretending to be someone, then A friend. Independent reports from separate accounts are a different kind of signal than one report from the person being copied. On Facebook, a friend who received a message from the clone can report it even if you have no account at all.
2. File copyright reports on every photo the clone took. Profile picture and cover photo first, because those are the two it needs. Then the albums and the old posts. Every filing removes an image and adds a strike. This track is handled by a legal team under DMCA obligations, and it regularly resolves cases the community standards reviewers turned down.
3. Use your data protection rights if you are in the EU or the UK. Your name and your photographs are personal data, and Meta has obligations around processing them. If Meta does not respond adequately, you can escalate to your national data protection authority. The Digital Services Act also gives you the right to challenge a moderation decision and to take it to out-of-court dispute resolution.
4. File a consumer protection complaint. In the US that is the FTC, at reportfraud.ftc.gov, and it matters most if anyone actually sent money. Your consumer protection authority can open an investigation without you having a Facebook account at all. Most countries have an equivalent.
5. File a police report. Do this when someone has been defrauded, when the clone comes with threats, or when new clones keep reappearing after every takedown. Bring the whole evidence file. A police report also strengthens your friends' fraud claims with their banks, and it can help identify the person behind it.
6. A lawyer's letter to Meta. When the clone is part of a sustained campaign of defamation or fraud, and the reports have gone nowhere, a formal legal letter moves things the Help Center cannot. The same applies when a fake Page is trading on your business and doing commercial damage.

One case that sits outside all of this: if the person being impersonated has died, the impersonation route does not apply. Facebook's memorialization request form is the correct one, and a family member or authorised representative can file it with documentation.

Steps 3 to 6 are for cases that will not resolve. This is general information and not legal advice. For your own situation, speak to a lawyer where you live.

How long does Facebook take? A realistic timeline

• Within 24 to 48 hours. In-app reports usually get an automated decision. Plenty of them come back as no violation, including on profiles that are obviously clones. Treat that as the cue to file the ID-verified form and to warn your friends directly, rather than as an answer.
• Within 3 to 7 days. An identity-confirmed impostor report reaches a human, and it is the strongest tool in the Help Center. While you wait, keep the warning post pinned and the Anti-Scam Page in your bio. The clone has not stopped.
• At two weeks. If the profile is still up, re-file the form with your friends' scam-message screenshots attached, and start the copyright filings on the profile photo, the cover photo, and every album image the clone has taken.
• Beyond two to four weeks. Move up the ladder above. Facebook publishes no response times and promises nothing. What is observable is that cases where friends reported independently, and where copyright filings ran alongside the impersonation report, tend to close faster than cases that rested on a single report from the victim.

Is impersonating someone on Facebook illegal?

Frequently, yes, depending on where you live and on what the impostor does with your name. Many countries and many US states treat online impersonation as a criminal offence, particularly when it is used to take money, to harass, or to defame. Using a cloned profile to talk your friends into sending money is fraud almost everywhere on earth.

Go to the police, or your country's cybercrime reporting channel, when:

• Someone actually sent money. They should also call their bank or payment provider straight away.
• The impostor is threatening, blackmailing, or harassing you or anyone you know.
• Private information or intimate images are being shared.
• The clones keep coming back, and it starts to look like a campaign rather than an opportunist.

Bring the evidence from Step 1. A police report strengthens your position with Facebook, and it strengthens your friends' fraud claims with their banks. This is general information and not legal advice. For your own case, speak to a lawyer where you live.

How to make your Facebook profile harder to clone

Cloning works because the materials are lying in the open. A scammer needs your name, your photo, and a list of people who already trust you. Each one of those can be taken away.

Hide your friends list

This is the single most disruptive thing you can do, and most people never do it. Without the list, a clone does not know who to send requests to. In Privacy Settings, set who can see your friends to Only me. The clone can still be built. It just has nowhere to go.

Lock down your photo history

Your current profile picture is always public, but your old albums and past posts do not have to be. Use Limit past posts in Privacy to pull older content back to friends only. Then go through the albums individually, because an album from six years ago is still a library for a cloner.

Use profile lock, where it is available

It restricts what non-friends can see in a single action: full-size photos hidden, profile picture not downloadable, sharing limited. Where you can turn it on, it is the fastest way to shrink what a stranger can harvest in one visit.

Look at your own profile as a stranger sees it

The View As tool shows you exactly what someone outside your friends list can see. Whatever is visible there is what the next clone will be built from. Remove it or restrict it.

Keep an Anti-Scam Page linked in your bio

A friend who gets a suspicious request can check it before they accept. Your real accounts are on it. Anything that is not on it is not you. It is the one prevention step that still works after a clone appears.

Get verified if you are eligible

A badge on the real profile makes every clone visibly different, and friends who know your account is verified will spot the missing badge instantly.

Secure the real account

A stolen account is worse than any copy of one. Unique password, two-factor authentication turned on. If your real account starts posting things you did not write, go to facebook.com/hacked immediately.

Search your own name every few months

And ask a couple of friends to tell you if a duplicate request from you ever arrives. A clone caught in its first hours reaches almost nobody.