A fake social profile can be more than an annoyance. An impersonator can copy your name, profile photo, job information and public posts, then contact your friends, clients or relatives while pretending to be you. Delhi Police’s cyber-crime guidance specifically recommends restricting who can find you, limiting what strangers can learn from your profile, refusing unknown requests and keeping privacy settings at their most restricted levels.
Why public profiles make cloning easier
Identity cloning does not always require a password breach. An impersonator can assemble small pieces of public information from several places: your profile photo, employer, city, family names, recent travel, birthday, mutual connections and writing style. Each detail may seem harmless, but together they can make a fake account convincing.
8 settings to review
- Make your account private where the platform allows it. This limits who can view future posts and profile information.
- Restrict profile discovery. Reduce who can find you through phone number, email address or search.
- Limit friend/follower visibility. If strangers can map your entire network, a cloned profile has an easier route to your contacts.
- Hide unnecessary personal details. Consider removing public birthday, phone number, address, workplace details and other information that an impersonator could reuse.
- Turn on two-factor authentication. This helps protect the real account if a password is compromised.
- Review old public posts. Change visibility on older photos, family information and location-heavy content that no longer needs to be public.
- Review tags and mentions. Reduce unwanted exposure through other people’s posts when the platform provides those controls.
- Audit followers and friends. Remove suspicious or unfamiliar accounts rather than accepting every request.
How to spot a cloned account
Look for a familiar name and photograph combined with a different username, unusually new account, small follower list, copied biography or requests that the real you would not normally make. Ask a friend to verify the account through another channel before they respond to money requests.
What to do if someone clones you
- Take screenshots showing the fake profile URL, username and visible content.
- Use the platform’s impersonation/report mechanism to request removal.
- Warn close contacts through your genuine account or another trusted channel.
- Change your real account password if you suspect unauthorized access and review active sessions.
- Enable or confirm two-factor authentication.
- If the impersonator is committing fraud or threatening someone, preserve evidence and report it to law enforcement or the relevant cybercrime reporting channel.
Do not overshare in public posts
You do not have to stop using social media. The goal is to make the public information set smaller and less useful to an impersonator. Think twice before posting exact travel dates, home locations, family relationships, identity documents, phone numbers or other details that can be combined into a convincing fake identity.
Related PURSHOLOGY resources
For additional account-protection guidance, read our SSH security mistakes article, fake UPI request guide, and fake software update fraud guide.
