A friend messages you asking why you have sent them a follow request from another account. You look, and there it is: your profile picture, your posts copied and a username almost identical to yours. Impersonation on Instagram can be a bad joke, an attempt to scam your followers or a form of harassment. Whatever it is, it pays to act quickly and methodically.
First of all: do not take the bait
It is tempting to message the fake profile or post something angry. Hold off for now. If the impersonator knows you have spotted them, they may delete content, change the username or block you, and you will lose evidence. Document first, report second.
Keep evidence before anything else
- Copy the profile URL and the exact username. The display name can change; the link is what identifies the account.
- Take screenshots of the profile, the posts and any messages it has sent to your contacts, with the date and time visible.
- Ask anyone who has received messages to send you screenshots and not to delete the conversation.
- Write down dates and facts in a document: when you found it, who it has contacted, what it was asking for.
If the impersonation could end up in court, for example because it is being used to defraud or defame you, screenshots may not be enough. In that case it is worth having an IT forensic expert certify the evidence before it disappears.
Report the profile to Instagram
Instagram lets you report accounts that pretend to be someone else, and you do not need an account to do it:
- From the app: open the fake profile, tap the three dots, choose "Report", then "Report account" and the option saying it is pretending to be someone else. Say that it is you.
- Through the help centre form: Instagram has a specific form for impersonation. It will ask for a photo of an identity document to confirm that you are the person being impersonated. A passport, a national ID card or a Spanish residence card (the TIE with your NIE number) all work. This is a normal step for this kind of report.
If it is your company or brand being impersonated, the process is similar, but you will need to show that you represent the business.
Tip
Ask your contacts to report the profile too, but with the right reason: impersonation. One report filed under the correct reason carries more weight than many generic "spam" reports.
Warn your followers
Once you have reported it, post a short story or message on your real account: "There is a profile using my photos. It is not me. Please do not reply or send money or codes." There is no need to link to the fake profile or give more detail. The aim is that nobody falls for it while Instagram reviews the report.
Protect your real account
Sometimes impersonation is a first step towards stealing the original account. Take the opportunity to:
- Turn on two-factor authentication.
- Change your password if you use it on other services.
- Check which devices are logged in.
- Be wary of messages asking for verification codes, even if they look as though they come from Instagram or a friend.
When to go to the police
If the fake profile is being used to ask for money, publish sexual or humiliating content, threaten you or damage your reputation, report it to the police: the Policía Nacional, the Guardia Civil or the regional police where they cover your area (the Mossos d'Esquadra in Catalonia, the Ertzaintza in the Basque Country). Depending on the case, the facts may amount to offences such as identity usurpation (Article 401 of the Spanish Criminal Code), fraud, insults or offences against privacy. Bring all the evidence you have gathered. You can ask for an interpreter when you make the report.
If you are not sure where to start, the 017 helpline run by INCIBE, Spain's national cybersecurity institute, offers free and confidential help.
If the account impersonated is your child's
When a child is being impersonated, the situation is more delicate. Parents or guardians can report the profile on the child's behalf, and it is best to do so as soon as possible. If the profile is being used to humiliate or bully them, tell the school as well and consider reporting it to the police.
If Instagram does not remove it
Sometimes the first review does not work, especially when the impersonator uses your photos but a slightly different name. You can insist by providing more context, use other channels the platform offers and, if the content is illegal, rely on the EU Digital Services Act.
If you are being impersonated and need the profile closed as soon as possible, we analyse your case for free and tell you honestly what can be done. The final decision always rests with the platform, and we give you a fixed quote before we start. More information on removing content from Instagram (in Spanish). We work in English and remotely, and deal with the platform and, where needed, the Spanish authorities on your behalf.
