Instagram Profile Cloning and Impersonation Scam
Criminals copy a real Instagram user's profile picture, username, and public posts to create a duplicate account, then use it to deceive the original user's followers into sending money or sharing personal information.
Part of: Profile Cloning & Impersonation Scams
Last reviewed: 7 June 2026
Instagram profile cloning is a scam that weaponises the trust people have built with their followers. The attacker does not need access to the real account — they simply copy the publicly visible information to build a convincing impostor, then exploit the victim's social network on their behalf.
Because the cloned account uses familiar photos and the same name, followers who receive a connection request or message from it may not immediately realise it is not the original account. This is especially effective in communities where people have many loose connections — business networks, hobbyist communities, school alumni groups — where recipients cannot be certain they recognise every mutual contact.
The scam is particularly damaging because it harms not just the person whose identity is cloned, but also their followers who are deceived. Victims of cloning often learn about it only after their friends report receiving suspicious messages.
How this scam works on the Instagram brand
The cloned account typically requests to follow the original user's followers, especially those who follow back automatically or have large, public followings. It then sends direct messages posing as the original person — often with a story about a financial emergency, a business opportunity, or an investment platform.
In some variants, the clone account sends messages claiming to be the 'real' account after the original was 'hacked', and asks followers to send money to a new payment address. In others, it poses as the original user to promote fraudulent products, fake cryptocurrency investments, or phishing links.
Instagram does not automatically alert users when their profile is being cloned, although it has systems to detect and remove impersonating accounts. Victims often only discover the cloning through a notification from a friend who received a suspicious message.
Common red flags
- You receive a follow request from an account with a name and photo identical to someone you already follow
- A familiar-looking account sends a message from a different username than the one you normally interact with
- The account's follower count and post count are much lower than the original
- The account was created recently but the profile photo shows a long-established public figure
- A message from a cloned account mentions a financial emergency or an investment opportunity out of the blue
- The account has no posts, or only a few posts recently added, despite claiming to be a long-standing profile
How to protect yourself
- Set your Instagram account to private to limit access to your public profile information and posts
- Watermark or add overlays to profile photos to make them less useful for cloning
- Alert your followers if you discover a clone of your account by posting a story on your real account
- Report cloned accounts immediately using Instagram's impersonation reporting at help.instagram.com/contact/636276399721841
- Warn close contacts directly if you believe a clone is actively messaging your followers
How to report it
- Report the cloned account using Instagram's 'Report' option: tap the three-dot menu on the profile and select 'Report > It's pretending to be someone else'
- If it is impersonating your account, use help.instagram.com/contact/636276399721841 for impersonation reports
- Report to the FTC at reportfraud.ftc.gov (US) or Action Fraud actionfraud.police.uk (UK)
- If money was sent, contact your bank immediately and file a fraud report
Frequently asked questions
Can Instagram prevent someone from copying my profile?
Instagram can remove impersonating accounts after they are reported, but it cannot completely prevent someone from creating one. Setting your account to private reduces the public information available for cloning. Reporting clones quickly — and encouraging your followers to do the same — helps Instagram act faster.
If my profile is cloned, is my real account compromised?
No. A cloned account is a separate, new account. Your original account and its security are not directly affected. However, the clone can damage your reputation and deceive your followers, so it should be reported and your followers warned as quickly as possible.
How can I check whether someone has cloned my account?
Search your own name and username on Instagram to see if any identical or near-identical accounts appear. You can also ask trusted followers to search. If friends mention receiving messages from 'you' that you did not send, that is a strong indicator of cloning.