Social media platforms like Facebook, Instagram, LinkedIn and X (formerly Twitter) make it easy to stay connected, but they also make it easy for scammers to exploit users. One common tactic is account spoofing.
What is account spoofing?
Spoofing happens when a scammer copies someone’s social media profile, such as their name, photos and other details, to create a fake account that looks real. The scammer then sends friend or connection requests to the victim’s contacts and may follow up with messages like, “I lost my old account — please add me!” to appear convincing.
How to spot a spoofed account
Scammers count on your trust to phish for personal information, spread malware or request money. Watch for these warning signs:
• Suspicious or off-topic links, especially gossip, shocking news or prize offers.
• Requests for money or financial help. When in doubt, verify the person through another method.
• Duplicate friend requests or unexpected messages from someone you’re already connected with.
• A profile that looks new, incomplete or slightly “off.”
If you suspect a fake account, notify the real person immediately and report the fake profile to the platform.
How to protect your account
Reduce your risk of being spoofed by taking simple precautions:
• Set your profile to private whenever possible.
• Review your security and privacy settings regularly.
• Only accept connection requests from people you know and trust.
• If you discover a spoofed version of your account, report it to the platform right away.