Facebook Profile Cloning Scam: How to Tell If You've Been Cloned (Seniors' Guide)

Bottom line: Profile cloning is when a scammer copies your name, profile photo, and public posts to build a fake Facebook account that looks like you — then sends friend requests to your real friends and family, hoping one of them will trust "you" enough to send money, gift cards, or personal information. It's different from being hacked: your real account is never touched, which is exactly why it's easy to miss. If you get a message from a friend asking "did you just send me a new friend request?" — that's almost always the first sign a clone exists. Report the fake profile to Facebook, warn your contacts in one public post, and lock down your privacy settings so it's harder to copy your information again.

Cloning has become one of the most common scams on Facebook because it doesn't require breaking into anything — no password, no security code, nothing to hack. A scammer only needs what's already visible on your public profile: your name and your profile picture. From there, they build a duplicate account and go to work on the people who trust you most.

Last updated: 2026-07-10

Cloning vs. Hacking: Why the Difference Matters

These two get confused constantly, but they call for different responses.

Hacking means someone got into your actual account — usually by guessing or stealing your password. They can post as you, message your real friends from your real account, and lock you out entirely.

Cloning means someone built a brand-new, separate account using your public name and photo. Your real account is completely untouched. You can still log in, post, and message normally — the fake one just exists alongside yours.

This is why cloning is so easy to miss for weeks or even months. Nothing changes on your end. You won't get a "someone logged in from a new device" alert, because no one logged into anything of yours. The first sign usually comes from someone else: a friend messages you, confused, asking why you sent them a second friend request.

Signs Your Profile May Have Been Cloned

Watch for these, especially if more than one happens around the same time:

A friend tells you they got a new friend request from you, even though you're already connected on Facebook.
Someone mentions a message from "you" asking for money, gift cards, or help with an "emergency" — especially anything urgent or embarrassing that discourages them from calling you to check.
You spot an account with your name and photo that isn't yours when you search your own name on Facebook.
Old posts or photos from your real profile show up on an account you don't recognize, copied to make the fake one look convincing.
A relative says they saw you post something you never posted — like a cryptocurrency tip, a giveaway, or a link to an outside website.

If you notice any of these, don't assume it will blow over on its own. Cloned profiles are usually working through a list — your friends and family — and the longer it's active, the more people it reaches.

What To Do If Your Profile Was Cloned

Step 1: Confirm It

Search your own name on Facebook (or ask a family member to do it for you). Look for a second account using your photo. Screenshot it — you'll want this for the report and to show concerned friends.

Step 2: Report the Fake Account to Facebook

Go to the cloned profile
Tap the three dots (⋯) next to the cover photo or profile name
Select Find Support or Report Profile
Choose "Pretending to Be Someone" → "Me"
Submit the report

Facebook typically reviews impersonation reports within a few days, though it can occasionally take longer. Reporting doesn't require the fake account to have done anything yet — impersonation alone violates Facebook's rules.

Step 3: Warn Your Friends Immediately — Don't Wait for Facebook

This is the most important step, and it's the one people skip because they feel embarrassed. You didn't do anything wrong; a scammer picked your name because your profile was public and easy to copy. Post something like this, publicly, on your real account:

> "A fake account using my name and photo is sending friend requests. If you get one from me and we're already friends, it's not really me — please don't accept it or respond to any messages from it. I'm reporting it to Facebook now."

Consider also directly messaging any close friends or relatives who are more likely to be targeted or less familiar with this type of scam.

Step 4: Lock Down Your Privacy Settings

Cloning relies entirely on public information. Reducing what's visible to strangers makes you a harder target the next time:

Go to Settings & Privacy → Settings → Privacy
Set "Who can see your friends list" to Friends Only — this is the single biggest one, since a public friends list is what lets a clone know exactly who to send requests to
Set future posts to Friends instead of Public
Turn off "Who can send you friend requests" from Everyone, and limit it to Friends of Friends
Review your profile picture's privacy — Facebook allows you to restrict who can download or share it

None of this stops someone from screenshotting a public profile photo, but it removes the friends list a scammer needs to actually run the scam, and it limits how much material they have to build a convincing fake.

If You Get a Message From a "Cloned" Friend

Sometimes you're not the one cloned — a friend or relative is, and the message lands in your inbox. The scam only works if you respond the way the scammer hopes: quickly, quietly, and without checking.

Don't reply through Facebook Messenger. Call or text the person directly, using a number you already have saved — not one provided in the message.
Be especially cautious with any request involving money, gift cards, or a "financial opportunity." A common variation uses a friend's name to pitch a cryptocurrency or precious metals "investment tip," claiming a guaranteed return. No legitimate opportunity needs to move through a rushed Facebook message from someone who supposedly can't talk right now. If you're genuinely interested in diversifying retirement savings, that conversation belongs with an established, regulated company — not a Messenger DM. Augusta Precious Metals is one option that offers free educational consultations with no pressure, which is the opposite of how these messages are designed to work.
If they ask you to click a link "to verify" your account or claim a prize, don't. It usually leads to a page built to steal your Facebook login.

Affiliate Disclosure: This article may contain affiliate links. If you make a purchase through these links, we may earn a small commission at no extra cost to you. We only recommend products we genuinely believe in. This helps support our work and allows us to continue providing free content.

If you spend time managing your accounts or checking on a cloned profile from a phone or laptop on public Wi-Fi — a library, a coffee shop, a hotel — NordVPN encrypts that connection so login attempts and personal details can't be intercepted by someone else on the same network. It runs quietly in the background with a single tap, and NordVPN offers a full refund in the first month if it's not for you.

Quick Reference: What to Do Right Now

| If this happened... | Do this |

|---|---|

| A friend says they got a duplicate friend request from you | Search your own name, confirm the clone, report it to Facebook |

| You found a fake account using your name/photo | Report as "Pretending to Be Someone → Me," then post a public warning |

| A "friend" messaged you asking for money or gift cards | Call them directly on a number you already have — don't reply in Messenger |

| You want to reduce future risk | Set friends list to Friends Only, limit friend requests, set posts to Friends |

| You want ongoing monitoring beyond Facebook | Consider an identity monitoring service like Aura |

Most cloned profiles get taken down within days once reported and once your real friends know not to engage with them. The scam only works in the gap between when it starts and when people find out — closing that gap quickly, with a clear public warning, is the most effective thing you can do.

Stay Ahead of the Next Scam

New scam tactics show up on Facebook and other platforms constantly, and they're built to look more convincing every year. Sign up below and we'll send you plain-English alerts about new scams targeting seniors, along with practical guides like this one, straight to your inbox.

Subscribe to ClearShield's free safety alerts →

No spam, no jargon — just what you need to know to stay safe, sent about once a week.