Synthetic Identity Fraud on Facebook
Fraudsters assemble fabricated profiles on Facebook by blending real and invented personal details, then use those profiles to gain trust, solicit money, or harvest credentials from unsuspecting users.
Part of: Synthetic Identity Fraud
Last reviewed: 1 June 2026
Synthetic identity fraud occurs when a bad actor combines genuine data fragments — such as a real name or date of birth sourced from a data breach — with invented details to create a plausible-looking persona. On Facebook, these composite identities can quickly amass friend connections, page likes, and group memberships that make them appear legitimate.
Once established, the synthetic profile is used to approach victims with investment pitches, romance lures, or requests for personal information. Because the account contains some real data, standard verification steps often fail to expose the fraud.
How this scam works on Facebook
A synthetic Facebook account typically mirrors an existing person's public photos and biographical details while using a slightly altered name or a fictional email address. The operator adds mutual friends by sending requests to hundreds of users until enough accept, giving the profile a credible social graph.
Once the profile looks established, the fraudster joins community groups or marketplace listings where potential targets are active. They initiate contact under the guise of shared interests, employment, or mutual acquaintances, then gradually build rapport before introducing a financial request or asking the victim to verify their own identity on an external site.
In some cases the synthetic identity is used purely to harvest information — the operator asks friendly questions over weeks before requesting documents like ID scans 'for a contest entry' or 'gift delivery verification.'
Common red flags
- Profile photos that reverse-image-search to a different name or unrelated website
- Account created recently but claiming years of shared history with the victim
- Friend list composed almost entirely of people the victim does not know
- Requests for personal documents framed as contest verification or prize delivery
- Profile biography that mixes specific real-sounding details with vague or inconsistent employment history
- Unusually fast escalation of trust or intimacy for a new connection
How to protect yourself
- Set your Facebook friend list and personal details to 'Friends only' or 'Only me' to limit data harvesting
- Verify new connection requests by checking mutual friends directly before accepting
- Never share government-issued ID, financial account numbers, or home address with anyone met only through Facebook
- Use reverse-image search on profile photos before engaging with unfamiliar accounts
- Report profiles that appear to be impersonating a real person using Facebook's impersonation report tool
- Enable two-factor authentication on your own account to prevent it being harvested for synthetic fraud
How to report it
- Use Facebook's 'Report Profile' option and select 'Pretending to be someone' or 'Fake account'
- File a report with your national identity-theft authority if your own details were used in the fake profile
- Contact the real person being impersonated (if identifiable) so they can report the profile themselves
Frequently asked questions
How can I tell if a new Facebook friend request is a synthetic identity?
Check the account creation date, examine whether profile photos appear elsewhere under a different name via reverse-image search, and look for a suspiciously sparse or perfectly curated post history. Genuine accounts typically show years of mundane activity.