InsightSocial media evidence

Facebook impersonation: how to prove a fake profile before it disappears

How to document a Facebook profile that copies your name and photos, and why the order of capture and report affects the evidence you keep.

TrueScreen editorial teamPublished 8 min read

TrueScreen captures a fake Facebook profile at the source, while it is still online, and certifies the capture with a qualified electronic seal and qualified timestamp, recognized internationally. The certification records the profile’s address, what the page showed and the date and time of capture. TrueScreen attests how the profile was captured, not who is behind it.

Key takeaways

  • Facebook offers a dedicated reporting path for profiles and Pages that impersonate someone, open even to people without a Facebook account (Facebook Help Center).
  • International instruments such as the Council of Europe Budapest Convention on Cybercrime address computer-related forgery and fraud; how national law applies to a given profile is for a lawyer to assess.
  • Meta states it does not retain data for law enforcement unless it receives a valid preservation request before the content is deleted (Meta law enforcement guidelines).
  • In the EU, Article 16 of the Digital Services Act requires hosting services to offer a notice mechanism for content reported as illegal; such a notice should carry a reasoned explanation and the exact URL (Regulation (EU) 2022/2065).
  • TrueScreen certifies the profile at capture; the certification carries a qualified electronic seal and qualified timestamp, recognized internationally. In the EU, eIDAS gives a qualified seal a presumption of integrity and correct origin of the data it is linked to (Art. 35(2)) and a qualified time stamp a presumption of accurate date and time (Art. 41(2)); the court still weighs the evidence case by case.

31,675

identity theft complaints received by the FBI’s IC3 in 2025 (complaints filed, not prevalence)

FBI IC3 Internet Crime Report, 2025

$2.1 billion

reported losses in 2025 to scams that started on social media

FTC Data Spotlight, April 2026

Nearly 30%

of people who reported losing money to a scam said it started on social media

FTC Data Spotlight, April 2026

Facebook impersonation often reaches you secondhand. A friend asks why you sent them a second friend request, or a client mentions a message you never wrote. The profile has your name and your photos, and it is already talking to people who trust you.

The natural reaction is to report it, but once Meta removes the profile, the clearest proof of it goes too. So how do you prove impersonation? When it is safe to do so, capture the profile with a certified method first and report it second.

This insight is part of our guide: Facebook defamation, deleted posts and how to capture evidence

When a fake Facebook profile becomes impersonation

A fake profile becomes impersonation when it borrows a real person’s identity so that others believe they are dealing with that person.

Facebook impersonation has its own reporting path for profiles and Pages, open even to people without a Facebook account (Facebook Help Center).

Your name and photos used to deceive

An account with an invented name, or an openly declared fan page, does not pretend to be you. Facebook impersonation copies your name, your profile picture and often your cover photo, then sends friend requests to people you know, asks them for money or posts in your voice.

International instruments such as the Council of Europe’s Budapest Convention on Cybercrime address computer-related forgery and fraud; how national law applies to a given profile is for a lawyer to assess. The FBI’s IC3 received 31,675 identity theft complaints in 2025, a count of complaints filed, not a measure of prevalence.

For cloned accounts beyond Facebook, see our article on digital identity theft and cloned accounts.

When defamation or misuse of personal data comes into play

An impostor profile that publishes statements damaging your reputation may also raise defamation issues; our guide on Facebook defamation and deleted posts as evidence covers that side. Your photos and personal details are also personal data, so using them without consent can raise data protection questions. A local lawyer can tell you which issues apply.

What you need to prove the profile existed

Your evidence has to show that the profile existed at a specific address and that it imitated you.

To prove Facebook impersonation, you need the profile itself, captured with its address and content at a known date and time, plus what ties it to you: your name, your photos and its messages to people you know. A screenshot shows part of this, but not where the image came from or when it was taken.

Profile, photos, posts and contacts to capture

The general method for certifying a web page applies here too.

Elements of a fake Facebook profile to capture, what each one shows and how to capture it
Element What it shows How to capture it
Profile address (username or numeric ID) Which profile it is, even if the display name changes Capture the profile page
Name, profile picture, cover photo That it copies your identity Capture the full profile page
Photos and posts Reuse of your images, statements in your name Open those sections and capture them
Friends and friend requests That it targets your contacts Capture the friends section if visible
Messages to your contacts The deception, such as requests for money With their agreement, the recipient captures the conversation from their own device, with no other chats or notifications on screen

If the profile can be seen only after signing in, do the Login inside the capture session, for example in a full recording in the Forensic Browser or in a Web Browsing Acquisition in the TrueScreen App, so the access is part of the record; keep passwords and verification codes off the screen. Never log in to someone else’s account, and do not reply to the impostor to draw out more messages.

Why reporting it to Meta before capturing it can cost you the evidence

A Facebook impersonation report asks Meta to remove the very page you need as evidence. Once it is gone, nobody can certify it: a certification attests only what a page shows at the moment of capture.

Meta’s law enforcement guidelines say it does not retain data for law enforcement unless it receives a valid preservation request before the content is deleted. In the EU, Article 16 of the Digital Services Act requires hosting services to offer a notice mechanism for content reported as illegal; such a notice should carry a reasoned explanation and the exact URL. A capture made first gives you that URL and a record of what you reported.

If the profile is still visible and you can do it safely, capture it before you block or report it. If the messages put you at risk or wear you down, protect yourself first: what you have already saved remains useful. If you are being threatened, or you or your contacts have sent money, contact the police or your local fraud reporting authority without waiting to finish the capture.

How TrueScreen captures a fake profile

TrueScreen certifies the fake profile while it is still online, so a certified record of it remains after Meta removes the profile.

TrueScreen, the Data Authenticity Platform, captures the profile at the source with the Forensic Browser, the TrueScreen App or the Browser Extension. The capture runs in a controlled environment, and any later change to the certified content is detectable.

  1. Capture the profile while it is online

    With the Forensic Browser, TrueScreen starts every capture from clean browsing data; it is the choice when the other side might challenge how the profile was captured. It captures selected pages, visible or full length, or records the whole session as video. The Browser Extension for Chrome and Edge suits cases where speed matters: it works in your open sessions and records the page hash, URL, title and UTC date and time. From a phone, certified browsing in the TrueScreen App (Web Browsing Acquisition) records continuous screen video with taps, navigation and URLs.

  2. Check the certification and keep it in your archive

    Each certification uses SHA-256 hashes and comes as a self-contained package with the sealed XML, the technical report and the original files. You can verify it independently of TrueScreen, for example on the public verifier. It is kept in your workspace archive and appears in the Portal, where you can organize it in folders. In the EU, under the eIDAS Regulation, a qualified electronic seal enjoys a presumption of integrity and correct origin of the data the seal is linked to (Art. 35(2)), and a qualified time stamp a presumption of accurate date and time (Art. 41(2)). The court still weighs the evidence case by case.

  3. Hand it over, then report the profile to Meta

    Give the package to your lawyer or the police, and only to them: the capture may show other people’s names and photos, so keep it off social media. Time limits for filing a complaint vary by country, so do not wait. Then report the profile from its page: open the options under the cover photo and choose Report profile (labels may change).

Conclusion

A fake Facebook profile is easy to report and hard to prove once it is gone. If it is still visible and you can do it safely, capture it first, with its address, content, date and time, then hand the certified package to your lawyer or the police and report the profile to Meta. The certification shows how the profile was captured and what it displayed; who created it, and which law applies, remain questions for investigators and for a lawyer in your jurisdiction.

FAQ: Facebook impersonation and fake profiles

Is making a fake Facebook account illegal?

It depends on the law where you live and on how the account is used. Many countries have rules on fraud, identity misuse, defamation or data protection that may apply. Whether a specific profile is an offense is for a lawyer or the police to assess.

What happens when you report a Facebook account?

If Meta removes the profile after your report, the page can no longer be seen or captured, and Meta’s guidelines say it keeps data for law enforcement only if a valid preservation request arrives before deletion. TrueScreen can certify the profile before you report it, so your record does not depend on what Meta keeps.

Can a fake Facebook profile be traced?

Finding out who made a fake Facebook account is a matter for investigators, who can request account records from Meta through formal legal process. Meta’s guidelines say it will preserve account records for 90 days in connection with official criminal investigations, pending that process. TrueScreen does not identify the author: it attests how the profile was captured and what it showed.

Why would someone impersonate you on Facebook?

Facebook impersonation often exploits your contacts’ trust: asking for money, selling goods that never arrive or damaging your reputation. The FTC reported $2.1 billion in 2025 losses to scams that started on social media, with more lost to scams that began on Facebook than on any other platform. The figures cover social media scams in general.

Sources and verification

Every figure and principle cited here links to its source, listed with type and date. Links checked on the publication date.

Sources cited in this insight, with type, date and reason for citing
Source Type Date What it supports
Facebook Help Center: report an impersonating profile or Page Document 2026 Reporting path for impersonating profiles, open to people without an account
Budapest Convention on Cybercrime (ETS 185) Law 2001 International framework addressing computer-related forgery and fraud, described in general terms
FBI IC3 Internet Crime Report 2025 Survey 2026 Identity theft complaints received in 2025
Meta information for law enforcement authorities Document 2026 Data retention and 90-day preservation of account records for criminal investigations
Regulation (EU) 2022/2065 (Digital Services Act), Art. 16 Law 19/10/2022 Notice mechanisms of hosting services for content reported as illegal: reasoned explanation and exact URL
Regulation (EU) No 910/2014 (eIDAS), Art. 35(2) and 41(2) Law 23/07/2014 Presumptions of qualified electronic seals and qualified time stamps
FTC Data Spotlight: reported losses to scams on social media Survey 27/04/2026 2025 losses to scams that started on social media, and Facebook as the platform with the highest losses

Capture the fake profile before it disappears

Certify a Facebook profile at the source with the Forensic Browser, the TrueScreen App or the Browser Extension: the certification carries a qualified electronic seal and qualified timestamp, recognized internationally.

Start nowRequest a demo

TrueScreen
TS

TrueScreen editorial team

This section is edited by the TrueScreen editorial team, which brings together expertise in digital forensics, the law of digital evidence and regulatory compliance. Every article is checked against primary sources: legislation, published rulings, technical standards and official documentation, always cited in the text.