Impersonation accounts are cheap to create and quick to cause damage, because they trade on relationships you built. The person defrauded is usually a friend, relative or client of yours who had no reason to doubt the message. Two things matter: getting the account removed, and getting ahead of it with your own contacts before they are approached.
Before you report: capture the evidence
Reporting works, and a successful takedown deletes everything you would later need to prove. Capture first.
- The profile page with the full URL or handle visible in the screenshot.
- The photographs used, alongside your originals showing they are yours.
- Every message the account sent, ideally forwarded to you by the contacts who received them, with their handles visible.
- Any payment request made in your name, including the account or wallet number given.
- Dates and times throughout.
Ask the contacts who received messages to send you screenshots straight away. Once they block the account, the thread often becomes inaccessible to them, and their evidence is frequently better than yours because they saw the approach.
Reporting to the platform
Every major platform has a dedicated impersonation route, which is faster and more reliable than a general report.
- Open the fake profile and use the report option on the profile itself, not a general help form. This attaches the correct identifiers automatically.
- Choose impersonation, specifically "pretending to be me", rather than a generic category such as spam. The category determines which team reviews it.
- Be ready to verify identity. Platforms commonly ask for a photo of an identity document to confirm you are the person being impersonated.
- Report from multiple accounts. Ask friends and family to report the same profile. Multiple reports on the same account tend to be actioned faster.
- Keep the report reference and any confirmation email.
If the impersonation is of a business or brand, use the brand or trademark reporting route instead, which is generally more effective. A registered trademark strengthens that route considerably - see our guide to trademark registration in Pakistan.
Warn your contacts the same day
Removal can take days. The fraud happens in hours. Post a short, clear notice from your real account and any group you are in:
"A fake account using my name and photographs is messaging people. I will never ask you for money or a verification code. If you receive such a message, do not respond, and please report the account."
This single step prevents most of the actual loss. It also creates a dated record that you acted promptly, which matters if a contact is defrauded and later asks why you did not warn them.
When to take it to the FIA
Platform removal deals with the account. It does not hold anyone to account. Involve the FIA where:
- Money has been obtained from anyone using your identity.
- Your photographs have been morphed or used in obscene or intimate content.
- The account is being used to harass a specific person.
- It is persistent - a new profile appears each time one is removed, which suggests a targeted campaign rather than opportunistic fraud.
- You can identify the person behind it, which makes investigation far more likely to succeed.
Unauthorised use of identity information is an offence under PECA. File through the online portal or on 1991, attaching your indexed evidence and the platform report references.
When it keeps happening
Repeat impersonation after successful takedowns is a different problem, and usually a personal one - an ex-partner, a former employee, a business rival. In that situation:
- Keep a single evidence file covering every incident with dates, so a pattern is visible rather than a series of isolated complaints.
- Report each new account and reference the previous takedowns.
- Name your suspicion to the investigator if you have a genuine basis for it. Investigations succeed far more often when there is a person to look at.
- Lock down your source material. Set your real accounts to private so there is a smaller supply of photographs to reuse.
- Consider parallel civil remedies where the conduct is defamatory or causing quantifiable loss.
A pattern documented across months is treated very differently from a single complaint about a single account.
Platform by platform: where the impersonation option is
| Platform | Route | Notes |
|---|---|---|
| Report profile, then "pretending to be someone" | Choose "me" rather than "someone I know" where it is you | |
| Report account, impersonation | Identity document verification is commonly requested | |
| TikTok | Report account, impersonation | Reports from multiple users are actioned faster |
| X | Report profile, impersonation | Distinguish parody accounts, which are treated differently |
| Report and block within the chat | Numbers rotate; warn contacts, as removal alone is not enough | |
| YouTube | Report channel, impersonation | Channel and content can be reported separately |
Always report from the offending profile itself. A report submitted through a general help centre form frequently lacks the identifiers needed to action it.
Limiting the damage to your reputation
Impersonation causes two kinds of harm: money taken from people who trusted you, and lasting doubt about what you did or did not say. The second is handled by getting your account of events out first, in a form people can point to.
- Post once, clearly, and pin it. A single dated notice on your real account is more effective than repeated explanations in private messages.
- Do not name a suspect publicly unless you can prove it. Public accusation exposes you to a defamation claim and complicates any later investigation.
- Tell anyone who paid to report it to their bank immediately - see bank fraud reporting, where speed determines recovery.
- Keep the notice up for a while. People check profiles days later.
- If clients or employers are affected, tell them directly rather than letting them hear it from the fake account.
Where an impersonation account has published defamatory content that has caused quantifiable loss, criminal reporting and a civil claim can run in parallel. They are separate remedies and pursuing one does not preclude the other.
Frequently asked questions
How do I get a fake profile using my photos removed?
Report it from the profile itself using the platform's impersonation option, specifically the pretending-to-be-me category, and be ready to verify your identity. Screenshot the profile and URL before reporting, since a takedown removes your evidence.
Is making a fake profile of someone a crime in Pakistan?
Yes. Unauthorised use of another person's identity information is an offence under the Prevention of Electronic Crimes Act 2016, and further offences arise where the account is used to defraud, harass or share obscene content.
How long does it take a platform to remove a fake account?
It varies from hours to several days depending on the platform and the category reported. Impersonation reports made from the profile itself, with identity verification, are generally faster than generic reports.
Should I message the fake account?
No. It confirms the account is being watched and often prompts the operator to move to a new profile, taking the evidence with them. Capture evidence and report instead.
What if the fake account keeps coming back?
Keep one continuous evidence file with dates so the pattern is visible, report each new account referencing earlier takedowns, and tell the investigator if you have a genuine basis to suspect a particular person.
Can I do anything if someone impersonates my business?
Use the platform's brand or trademark reporting route rather than personal impersonation, which is generally more effective. A registered trademark strengthens the claim significantly.
Sources & official references
- Federal Investigation Agency - official cybercrime wing pages, reporting centres and complaint facility
- Prevention of Electronic Crimes Act 2016 - the governing statute on the official Pakistan Code
- Pakistan Telecommunication Authority - complaint channel for unlawful online content