Social media is a convenient way to stay connected with the people we care about, but it has also become a valuable tool for criminals who exploit trust to commit fraud. One of the most common and fast growing threats is social media impersonation, a tactic in which scammers create a cloned version of a genuine profile and then use it to deceive that person’s friends, relatives, and colleagues. Because these accounts look familiar and often use the same photos, names, and biographical details, unsuspecting contacts can easily be tricked into sharing financial information or even sending money directly to the criminal.
How does social media impersonation work?
The process usually begins with a fraudster visiting a legitimate profile and copying whatever they can, from profile pictures to posts and even writing style. Once they have created a near identical duplicate, they begin sending new friend requests or connection requests to the victim’s contacts. Many people accept these requests automatically, assuming the sender is someone they know and trust. Once the impersonator has established a connection, they begin engaging directly with the target. The messages may seem harmless at first, but the conversation soon shifts towards requests for money, claims of urgent personal emergencies, or encouragement to click on unfamiliar links. In some cases, the scammer states that they have lost access to their previous account and need personal details to “recover” it, a ruse that is often used to obtain phone numbers, email addresses, or banking information.
What to look out for?
Many impersonation scams follow similar patterns. Friends and family might receive sudden requests for help, supposedly due to a medical emergency or unexpected expense. Others are encouraged to participate in competitions or investment opportunities, often accompanied by suspicious links. In more sophisticated attempts, the impersonator may try to persuade the victim to share one time passcodes, card numbers, or login credentials, insisting that the request is urgent or that it will “just take a moment”. These tactics rely on emotional manipulation and the assumption that a message coming from a familiar face can be trusted.
How to prevent social media impersonation scams
Preventing these scams begins with limiting the amount of information that is visible on your own profile. By adjusting your privacy settings so that your photos, posts, and friend lists are not publicly accessible, you make it considerably more difficult for criminals to copy your online presence. Being cautious when receiving a duplicate friend request is equally important. If someone you know appears to be reaching out to you again, it is always worth taking a moment to contact them through another channel to ensure that the request is genuine. Trusting your instincts is often the best defence so keep in mind that if something feels unusual, it usually is.
Remaining alert to unexpected or unusual messages can prevent a scam from progressing. Genuine friends will not request banking details, identification documents, or login codes through social media, nor will they pressure you into clicking unfamiliar links. If a message feels suspicious, it is safer not to engage. Enabling two factor authentication on your own accounts adds an additional layer of protection and helps prevent anyone from gaining access to your profile in the first place.
What to do if someone is impersonating you online
If you discover that someone is impersonating you online, prompt action is vital. You should report the fake profile to the social media platform immediately. Most services, including Facebook, Instagram, and LinkedIn, offer straightforward reporting options that allow users to flag accounts pretending to be them. Asking your friends and family to report the profile as well can speed up the removal process. It is also wise to notify your contacts publicly from your genuine account so they know not to interact with the impersonator. At the same time, reviewing your security settings, updating passwords, and enabling two factor authentication will help strengthen your account against further attempts.
Anyone who believes they may have provided sensitive financial information to a scammer should also contact their bank without delay so that protective measures can be taken. Monitoring your accounts closely for unfamiliar transactions is also advised as is reporting the incident to the Cyber Crime Unit of the Malta Police Force.
Keeping safe through vigilance
Social media impersonation relies on familiarity and trust, but by understanding how these scams operate and by approaching suspicious messages with caution, you can protect yourself and your loved ones from financial harm. MeDirect remains committed to supporting customers with clear guidance and practical steps to stay safe online, and we encourage everyone to remain vigilant when interacting on social platforms.
