Fake Profiles on Instagram & Facebook: New Fraud Trend Targeting Users—How to Stay Safe

A new and alarming cyber-fraud technique is rapidly spreading across social media platforms like Instagram and Facebook. In this scam, cybercriminals clone the profile of someone you know—your friend, colleague, or even a close relative—and then message everyone on their follower or friend list asking for urgent financial help. Because the profile looks completely real, many people end up sending money without a second thought.

Imagine this:
You receive a message from your friend saying, “Bro, my phone is damaged. I need ₹20,000 urgently. Please send via UPI.” Without suspecting anything, you transfer the money. Moments later, your real friend calls and says they never sent any such message. By then, the fraudster has already vanished with your money.

This new wave of impersonation fraud has left thousands of social media users vulnerable. Understanding how this scam works—and taking the right precautions—is essential to staying safe online.

How This Scam Works

Cybercriminals follow a simple but highly effective strategy:

1. They find a public profile

Fraudsters target social media profiles that display public information such as profile photos, cover images, and posts. Facebook, Instagram, and X (formerly Twitter) are their most common hunting grounds.

2. They create an identical account

Using the same name, profile photo, and sometimes copied posts, they build a fake clone account that looks almost indistinguishable from the original.

3. They follow or send requests to all friends/followers

Once the clone account is ready, scammers start sending follow requests or friend requests to everyone in the original user’s list. Because people see a familiar name and mutual connections, they often accept the request without verifying authenticity.

4. They send emergency messages asking for money

After establishing the connection, scammers send direct messages like:

• “My phone is damaged, I’m messaging from a temporary account.”

• “I urgently need ₹10,000–₹20,000. Please send through UPI.”

• “I’m stuck, please help immediately. I’ll return the money soon.”

Since the cloned profile looks genuine, victims panic and transfer the amount instantly. By the time they realize the truth, the money is long gone.

How to Protect Yourself from This Scam

Staying alert and following simple cybersecurity practices can prevent such fraud:

1. Keep your profile private

Set your profile photos, cover images, posts, and friend list visibility to ‘Friends Only’ or ‘Only Me’ wherever possible.

2. Verify before sending money

If someone messages you from a new account or unknown number asking for money, always confirm via a direct call or another trusted method.

3. Check suspicious accounts carefully

Before accepting follow/friend requests:

• Look for old posts

• Check account creation date

• Verify whether the account has genuine engagement

• Compare it with the real profile if you know the person

4. Protect UPI transactions

• Never share your UPI PIN with anyone

• Prefer using the Request Money option to avoid accidental transfers

• Double-check the receiver’s identity

5. Update your privacy settings regularly

Review your social media privacy settings every few months to ensure your information is not publicly visible.

Where to Report Such Fraud

If you encounter a fake profile or receive a suspicious message:

• File a complaint at the national cybercrime portal: cybercrime.gov.in

• Call the cybercrime helpline: 1930

• Report the fake account directly on Facebook, Instagram, or X

• Visit your nearest police station or cyber cell for a written complaint