What should you do in the first hour of discovering someone is impersonating you online?

The Simple Truth

The first hour after discovering an impersonation account is the highest-leverage window. The actions taken in this hour determine: how many additional people are defrauded before the account is stopped; whether evidence is preserved before the account disappears; and whether any financial transactions by the impersonator can be reversed. Six actions in sequence — all within the first hour — provide the complete first-response.

Minute 1-5 — Document before reporting

Screenshot the impersonating account before reporting it. Platforms sometimes remove impersonation accounts within minutes of a report — and once removed, the evidence (account name, profile picture, post history, follower count) disappears. Screenshot: the account's profile page (name, handle, profile picture, bio); any posts or stories showing what the impersonator is selling; any DMs from the impersonating account if you have received them; and the account's follower list if visible (may show victims who have already engaged with the fake account).

Minute 5-15 — Publish your public denial

Immediately post on all your authentic, verified accounts: 'URGENT: There is a fake [platform] account using my name and photograph. The handle is [fake handle]. I have NOT authorised this account. Anyone who has been contacted by this account about purchasing notes — do NOT pay any money. This is fraud. I have reported this to the cybercrime authorities.' This public denial reaches your genuine followers faster than any legal mechanism and stops the ongoing fraud in real time.

Minute 15-30 — Report to the platform

Report the impersonating account through the platform's formal reporting mechanism. For Instagram: Settings → Help → Report a Problem → select 'Impersonation'; attach screenshots. For Facebook: three dots on the profile → Report → Identity theft. For WhatsApp: cannot directly report an account by profile — contact your network to report the account from their ends + report to cybercrime.gov.in with the phone number. For YouTube: three dots → Report → Spam or misleading → Impersonation. Each report triggers the platform's moderation review. Multiple reports from different users accelerate review.

Minute 30-60 — Cybercrime complaint and call 1930

File at cybercrime.gov.in with: the impersonating account details; screenshots; and a description of the fraud. If money has already been transferred to the impersonating account, call 1930 immediately for the bank freeze. Contact an advocate if the impersonation is large-scale (many followers, multiple victims already contacted) to initiate the High Court injunction process described in Q476.

First-hour impersonation response — six actions in sequence

0-5 min: Screenshot the impersonating account BEFORE reporting (evidence disappears on removal)

5-15 min: Post public denial on ALL your authentic verified accounts — name the fake handle explicitly

15-30 min: Report through platform's formal impersonation reporting mechanism

30-45 min: File at cybercrime.gov.in with screenshots and account details

45-60 min: Call 1930 if any money has been transferred to the impersonating account

Hour 2+: Contact advocate for High Court injunction if large-scale impersonation with multiple victims

Laws & authorities referenced in this chapter

IT (Intermediary Guidelines) Rules 2021 — platform impersonation reporting mechanism: formal trigger for removal obligation

National Cybercrime Reporting Portal — cybercrime.gov.in: formal complaint filing with evidence

National Cybercrime Helpline 1930 — bank freeze if financial transactions identified

Code of Civil Procedure 1908 — Order 39 (High Court injunction: large-scale impersonation with multiple victims)

Key Takeaway

First-hour impersonation response: (1) Screenshot before reporting — evidence disappears on account removal; (2) Publish public denial on all authenticated accounts — name the fake handle explicitly; (3) Platform formal impersonation report (platform-specific mechanism); (4) cybercrime.gov.in complaint with screenshots; (5) Call 1930 if money transferred; (6) Advocate for High Court injunction if large-scale. Speed determines how many additional victims are defrauded. Every minute the impersonation account operates is another potential victim.

This is educational content, not legal advice. For a specific situation, please consult a qualified legal professional. Excerpted from Currency, Coins & The Law by Mayank Agarwal, Part 43: Collector Protection & Impersonation Response — 5 Red Flags, Helplines, Multi-State Scams, Trusted Seller Registry, Platform Responsibility, Impersonation Response Kit.

← Back to Part 43 Next question →