How to find who is behind a fake account, lawfully

A fake profile using your photos, harassing you or spreading lies can feel impossible to fight. Here is how to get it removed and how the real person behind it can be identified through lawful channels.

Quick answer

You usually cannot see who runs a fake account yourself, because only the platform holds its sign-up and login data. Save evidence, report the profile to Instagram or Facebook, and file a complaint on cybercrime.gov.in or with police. Police can lawfully require the platform to disclose account details. Hacking or tricking the account owner is a crime.

Key takeaways

  • Screenshot the profile, URL, username and messages with dates before reporting anything.
  • Report impersonation directly to the platform; you can do so even without an account.
  • Only police or a court can make Instagram or Facebook reveal who created an account.
  • Never hack, phish or send tracking links to unmask someone; that is an offence.
  • Impersonation is punishable under IT Act s.66C and 66D and BNS provisions on personation.

What is a fake profile, and when is it a crime?

A fake profile, or fake ID as it is commonly called in India, is a social media or messaging account that hides or misrepresents who is behind it. Not every anonymous account is illegal; people use pseudonyms for privacy. It becomes a legal matter when the account is used to impersonate a real person, harass, threaten, defame, cheat or share intimate images.

A "fake profile case" usually involves one or more of these offences:

What the fake account doesLikely legal provision
Uses your name and photos to pose as youIT Act s.66C (identity theft), s.66D (cheating by personation using a computer resource); BNS s.319 (cheating by personation)
Sends threatsBNS s.351 (criminal intimidation)
Repeatedly contacts or monitors a woman onlineBNS s.78 (stalking)
Posts false statements harming reputationBNS s.356 (defamation), plus civil remedies
Shares or threatens to share private imagesIT Act s.66E, 67, 67A; BNS s.77 where applicable
Uses a fake identity to take moneyBNS s.318 (cheating), IT Act s.66D

Can you find out who owns a fake Instagram account yourself?

Honestly, rarely with certainty. The data that identifies a person, such as the email or phone number used to sign up and login IP addresses, sits with Meta, Google or the relevant platform. They do not share it with individuals. Apps and websites claiming to reveal "who is behind this Instagram account" are scams, and many are phishing traps that steal your own login.

What you can lawfully notice are clues from what the account shows publicly: which mutual followers it targets, when it posts, the language and phrases it uses, personal details only a few people would know. These clues can help police focus their enquiry. But treat them as suspicion, not proof. Publicly accusing the wrong person can expose you to defamation and wreck relationships.

How do you report a fake profile, step by step?

  1. Preserve evidence first. Screenshot the profile page, username, the profile URL, each offending post or message, and comments. Include the date and time. Save copies of photos it has taken from you. Ask friends who received messages to screenshot them too.
  2. Report to the platform. Instagram and Facebook have specific impersonation reporting forms, which can be used even by people without an account, and in-app options to report a profile "pretending to be someone". Choose impersonation, harassment or nudity as accurate.
  3. Escalate to the grievance officer. Under India's IT Rules, large platforms must have a grievance officer in India, acknowledge complaints and resolve them within set timelines. Complaints involving impersonation or intimate images must be acted on within hours under the rules as amended in 2026.
  4. Appeal if needed. If the platform's response is unsatisfactory, you can appeal to the government's Grievance Appellate Committee through gac.gov.in.
  5. File a cyber crime complaint on cybercrime.gov.in, or at the local cyber cell, attaching your evidence. For threats, stalking or sexual content, ask for an FIR.
  6. Consider legal action through a lawyer for defamation or an injunction, if reputation damage is serious.

How do police identify the person behind a fake account?

Once a complaint is registered, police can issue a notice or legal request to the platform asking for basic subscriber information and login records. Under the Bharatiya Nagarik Suraksha Sanhita, 2023 they can require production of documents and electronic records needed for an investigation (BNSS s.94, earlier CrPC s.91). Platforms based abroad have law-enforcement response channels for Indian police, and urgent cases involving threats to life are prioritised.

With the IP addresses and phone numbers returned, police can then lawfully ask telecom operators who used them at the relevant time. This chain of legal requests is how most fake account cases are solved. It cannot be replicated privately, which is why reporting to police matters.

Courts can also direct platforms to disclose details or remove content in civil cases, for example in defamation suits filed by your lawyer.

What should you avoid doing?

Anger at a fake account can push people into mistakes that turn them into the accused.

  • Do not hack or try to log into the account, even if you think you know the password. Unauthorised access is an offence under IT Act s.43 and s.66.
  • Do not send tracking links or IP grabbers to the account to trace it. This is deception and unauthorised data collection, and the evidence is unusable.
  • Do not create counter fake profiles to trap the person.
  • Do not hire anyone who promises to unmask the account through "inside contacts" or hacking. You may be paying a fraudster, or paying for a crime.
  • Do not publicly name a suspect without proof.
  • Do not delete your own chats with the account; they are evidence.

Can a private detective help with a fake profile case?

Within limits. A lawful investigator cannot demand data from Instagram or telecom companies, and should never hack. What they can do is organise your evidence into a clear, dated timeline, analyse the public activity of the account, identify real-world links (for example, events or details only certain people knew), and, where a suspect emerges, conduct lawful enquiries to support the police complaint. In matrimonial contexts, fake profiles are sometimes used to harass a spouse or a prospective match; the pre-matrimonial investigation team handles such verification.

The final identification, however, comes through police requests to the platform. A detective's role is to make that complaint strong. Read more on what detectives can lawfully do, and on the evidentiary side, whether screenshots and chats count as evidence.

Fake profiles in matrimonial, dating and business settings

  • Matrimonial sites: fake grooms and brides are used to collect money or personal photos. Report to the site and police, and read our guide on matrimonial fraud.
  • Sextortion: fake profiles start chats that lead to recorded video calls and blackmail. See what to do if someone is blackmailing you.
  • Business impersonation: fake pages copying your brand or a senior executive to cheat customers. Report under the platform's intellectual property or impersonation forms and alert customers through your official channels.

Bottom line

You cannot lawfully unmask a fake account on your own, but you can make sure it is removed and that the person behind it is identified through proper channels. Save evidence, report to the platform and its grievance officer, appeal if needed, and file a complaint so the police can obtain the account data. Stay on the right side of the law yourself; it keeps your case strong.

This guide is general information, not legal advice. Laws and procedures change, and every case is different — speak to a lawyer about your situation. In an emergency, call 112.

FAQ

Questions, answered.

Is the process different for a fake Facebook account?

The principles are the same because Facebook and Instagram are both run by Meta. Use Facebook's impersonation report or its dedicated form if you have no account, save the profile URL and numeric ID, and escalate to the grievance officer if needed. For identification, police send a legal request to Meta, exactly as with Instagram. WhatsApp numbers can additionally be traced through the telecom operator.

Fake profile kya hai aur iski complaint kaise kare?

Fake profile ek aisa social media account hai jo kisi aur ki pehchaan, naam ya photo ka galat istemal karta hai, ya apni asli pehchaan chhupakar kisi ko pareshan karta hai. Complaint ke liye pehle screenshots aur profile link save karein, phir platform par report karein aur cybercrime.gov.in par ya nazdeeki cyber cell mein shikayat darj karein.

How long does Instagram take to remove a fake account?

It varies. Clear impersonation reports with ID proof are often handled within days, sometimes faster. Under the IT Rules as amended in 2026, complaints about impersonation or intimate images must be acted on within a few hours. If the account stays up, escalate to the platform's India grievance officer and then the Grievance Appellate Committee.

Can a fake account be traced if it was made with a fake email?

Often, yes. Even with a fake email, the platform logs IP addresses, device information and sometimes a phone number used for verification. Police can request these and then ask internet or telecom providers who was using that connection. Use of VPNs or public Wi-Fi makes it harder but not always impossible, which is why detailed complaints help.

Can I be punished for making a fake account myself?

Simply using a pseudonym is not a crime in itself, though it may break the platform's rules. It becomes an offence when the account impersonates a real person, cheats, harasses, threatens, defames or shares private images. Making fake accounts to spy on or trap someone, even someone who wronged you, can also land you in legal trouble.

What if the fake account is spreading lies about me at work or in my community?

Collect evidence, report the posts, and file a cyber complaint. Speak to a lawyer about a defamation notice or a civil suit seeking removal and an injunction; courts can direct platforms to take content down and in some cases disclose who posted it. Keep a calm record of the harm, such as lost business or messages from colleagues.