What should you do in the first hour of discovering someone is impersonating you online?
The first hour after discovering an impersonation account is the highest-leverage window. The actions taken in this hour determine: how many additional people are defrauded before the account is stopped; whether evidence is preserved before the account disappears; and whether any financial transactions by the impersonator can be reversed. Six actions in sequence — all within the first hour — provide the complete first-response.
Minute 1-5 — Document before reporting
Screenshot the impersonating account before reporting it. Platforms sometimes remove impersonation accounts within minutes of a report — and once removed, the evidence (account name, profile picture, post history, follower count) disappears. Screenshot: the account's profile page (name, handle, profile picture, bio); any posts or stories showing what the impersonator is selling; any DMs from the impersonating account if you have received them; and the account's follower list if visible (may show victims who have already engaged with the fake account).
Minute 5-15 — Publish your public denial
Immediately post on all your authentic, verified accounts: 'URGENT: There is a fake [platform] account using my name and photograph. The handle is [fake handle]. I have NOT authorised this account. Anyone who has been contacted by this account about purchasing notes — do NOT pay any money. This is fraud. I have reported this to the cybercrime authorities.' This public denial reaches your genuine followers faster than any legal mechanism and stops the ongoing fraud in real time.
Minute 15-30 — Report to the platform
Report the impersonating account through the platform's formal reporting mechanism. For Instagram: Settings → Help → Report a Problem → select 'Impersonation'; attach screenshots. For Facebook: three dots on the profile → Report → Identity theft. For WhatsApp: cannot directly report an account by profile — contact your network to report the account from their ends + report to cybercrime.gov.in with the phone number. For YouTube: three dots → Report → Spam or misleading → Impersonation. Each report triggers the platform's moderation review. Multiple reports from different users accelerate review.
Minute 30-60 — Cybercrime complaint and call 1930
File at cybercrime.gov.in with: the impersonating account details; screenshots; and a description of the fraud. If money has already been transferred to the impersonating account, call 1930 immediately for the bank freeze. Contact an advocate if the impersonation is large-scale (many followers, multiple victims already contacted) to initiate the High Court injunction process described in Q476.
First-hour impersonation response — six actions in sequence 0-5 min: Screenshot the impersonating account BEFORE reporting (evidence disappears on removal) 5-15 min: Post public denial on ALL your authentic verified accounts — name the fake handle explicitly 15-30 min: Report through platform's formal impersonation reporting mechanism 30-45 min: File at cybercrime.gov.in with screenshots and account details 45-60 min: Call 1930 if any money has been transferred to the impersonating account Hour 2+: Contact advocate for High Court injunction if large-scale impersonation with multiple victims |
Laws & authorities referenced in this chapter
IT (Intermediary Guidelines) Rules 2021 — platform impersonation reporting mechanism: formal trigger for removal obligation
National Cybercrime Reporting Portal — cybercrime.gov.in: formal complaint filing with evidence
National Cybercrime Helpline 1930 — bank freeze if financial transactions identified
Code of Civil Procedure 1908 — Order 39 (High Court injunction: large-scale impersonation with multiple victims)
First-hour impersonation response: (1) Screenshot before reporting — evidence disappears on account removal; (2) Publish public denial on all authenticated accounts — name the fake handle explicitly; (3) Platform formal impersonation report (platform-specific mechanism); (4) cybercrime.gov.in complaint with screenshots; (5) Call 1930 if money transferred; (6) Advocate for High Court injunction if large-scale. Speed determines how many additional victims are defrauded. Every minute the impersonation account operates is another potential victim.
This is educational content, not legal advice. For a specific situation, please consult a qualified legal professional. Excerpted from Currency, Coins & The Law by Mayank Agarwal, Part 43: Collector Protection & Impersonation Response — 5 Red Flags, Helplines, Multi-State Scams, Trusted Seller Registry, Platform Responsibility, Impersonation Response Kit.