Skip to content
Free audit

Solutions · Protect

Impersonation and privacy

A profile using your name and photograph, a page cloned from your business, a leaked phone number or document: these are time-critical. Spy Monk helps you preserve the evidence first, then prepare the platform complaint — and points you to the official reporting route when a crime is involved.

Updated By Drive Digital Editorial

Run a free auditGuide: the first 48 hours after impersonation

No card needed

Evidence preserved before anything else · Platforms and authorities decide · We never attempt to identify anonymous people

Direct answer

What should I do if someone is impersonating me or my business online, and how does Spy Monk help?

Preserve evidence before reporting: screenshots, URLs, dates and the profile's identifiers. Spy Monk stores them with SHA-256 fingerprints in an impersonation or privacy case, helps you prepare the platform's own impersonation report, and tracks the decision. Under the IT Rules 2021, intermediaries must act on impersonation complaints within two hours; the police route is cybercrime.gov.in or 1930.

  • Case types: impersonation, privacy and harassment, each with fingerprinted evidence
  • IT Rules 2021 rule 3(2)(b): impersonation and intimate-imagery complaints acted on within 2 hours (amended Feb 2026)
  • Platform reports need an approval record before they are marked sent
  • Cyber crime: report at cybercrime.gov.in or call 1930

What it does

Evidence first, then the right door

Impersonation moves fast and leaves little behind. A cloned Instagram account messages your customers asking for advance payments; a look-alike Facebook page copies your logo and posts an offer you never made; a profile with your name and photograph approaches your contacts. By the time you have decided what to do, the account may have been renamed or deleted — along with the proof. The first job is therefore not reporting; it is preservation.

DRS gives that job a structure. An impersonation, privacy or harassment case holds the URLs, screenshots, HTML snapshots and files you collect, each fingerprinted with SHA-256 and timestamped on upload, so you can later show exactly what existed and when. The case records the identifiers that platforms ask for — the profile URL or handle, the display name, the date you first saw it, the messages it sent — and the proof of your own identity or authority that most platforms require before they act.

From that record you prepare the complaint. Every major platform has a published impersonation policy and its own reporting form: Meta's Community Standards on authentic identity, X's authenticity policy, YouTube's impersonation policy, and Google's process for removing personal information such as contact details, identity documents or bank numbers from Search. Spy Monk helps you match the facts to the policy, records the approval from your team, and tracks the outcome: removed, labelled, kept, or no response. Where the conduct is also a crime — cheating by personation, extortion, publishing private images — the case points you to the National Cyber Crime Reporting Portal and the 1930 helpline, with your evidence already organised for the complaint.

What you get

Inside an impersonation or privacy case

  • Available now

    Impersonation, privacy and harassment case types

    Dedicated case types with URGENT priority, so the case is marked for immediate attention and your team is notified in-app when it is opened.

  • Available now

    Fingerprinted evidence

    Screenshots, HTML snapshots, PDFs and notes stored with SHA-256 hashes and upload timestamps. Download headers carry the hash so a recipient can verify the file.

  • Available now

    Platform-complaint preparation

    Our guides list what each platform's form asks for — identifiers, proof of identity or authority, the policy relied on — and the case notes hold your answers, so the report is complete the first time.

  • Available now

    Approval gate and outcome tracking

    Platform reports are approved by an admin or owner before they are marked sent. The case tracks removal, labelling, rejection or silence.

  • Available now

    Official-route signposting

    Clear pointers to cybercrime.gov.in and 1930 for criminal conduct, and to a qualified professional for legal steps. Never a substitute for either.

  • Phase 2

    Social-profile monitoring via connectors

    Detecting look-alike accounts on Facebook, Instagram, X, LinkedIn or YouTube automatically needs the Phase 2 connectors. Today, add the profile URL to a case yourself.

What it cannot do

The limits, stated plainly

  • It cannot remove an account or a page. Platforms decide under their own policies and timelines. Indian law requires intermediaries to act on certain complaints within fixed hours, but the decision remains theirs.
  • It does not identify who is behind an account. Only a court or a competent authority can direct a platform to disclose that information. Spy Monk will not attempt to work it out, and you should be wary of anyone who offers to.
  • It is not an emergency service. If anyone is in danger, contact the police first. Spy Monk is for the evidence and the paperwork that follow.
  • It does not file the police complaint for you. You, or your representative, file at cybercrime.gov.in or at a police station. Spy Monk makes sure your evidence is in order.
  • It does not scan social platforms for impostors yet. Until the Phase 2 connectors ship, look-alike accounts are found by you, by your customers, or occasionally in search results covered by an audit.
  • It is not a legal assessment. Whether conduct amounts to an offence or a civil wrong is for a qualified professional and the authorities.

How it works

From discovery to a recorded platform decision

  1. Capture before you report

    Open an impersonation or privacy case and add the profile URL, screenshots of the profile, posts and messages, and the date and time you found it. Spy Monk fingerprints everything on upload.

    What you seeWhat you see: an evidence list with hashes and timestamps, and a case timeline starting now.

  2. Record identity and authority

    Note which entity is impersonated and attach the proof platforms ask for — a government ID for a person, registration or trademark documents for a business — stored only in your workspace.

    What you seeWhat you see: the entity card and the authority documents linked to the case.

  3. Match the facts to the policy

    Use the guide's checklist to confirm which rule applies: impersonation of a person or organisation, a fan or parody account without labels, personal information published to harm, or intimate imagery. Note it in the case.

    What you seeWhat you see: your policy-assessment note in neutral language.

  4. Approve and submit through the platform

    An admin or owner records an approval. You submit the platform's own form — and, where a crime is involved, the complaint at cybercrime.gov.in — and mark the case Submitted with the reference numbers.

    What you seeWhat you see: approval record, submission date, channel and reference.

  5. Warn your audience and track the result

    Post a short, approved notice on your genuine channels so customers know which account is real. Record the platform's decision and, if needed, escalate after professional review.

    What you seeWhat you see: Awaiting response → Resolved / Rejected / Escalated → Outcome verified → Closed.

Who it is for

Who is impersonated most often

What you need to provide

What platforms and police will ask for

  1. The impostor's identifiers — profile URL or handle, display name, and screenshots that show the URL and the date.
  2. The messages or posts — especially any that solicit money, make offers, or contact your customers.
  3. Proof of who you are — a government ID for an individual; registration, GST or trademark documents for a business. Platforms generally require this before acting, and an authorised representative can usually file on your behalf.
  4. Proof of the genuine account — your real profile URLs and website, so the platform can compare.
  5. Any victims' accounts — if a customer paid an impostor, their statement and transaction details support the cyber-crime complaint. Financial fraud should be reported to 1930 as early as possible.
  6. A named approver in your team, and — for legal steps — a qualified professional.

Legal context

Timelines and provisions you can check

to act on impersonation or intimate-imagery complaints — IT Rules 2021, rule 3(2)(b), as amended 10 Feb 202612
2 h
intermediary grievance officer must acknowledge / resolve a complaint — rule 3(2)(a)12
24 h / 7 days
IT Act 2000: identity theft; cheating by personation using a computer resource3
s.66C, 66D
Bharatiya Nyaya Sanhita 2023: cheating by personation4
s.319

Sources

  1. Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 — consolidated text as on 10 February 2026 (opens in a new tab). Ministry of Information and Broadcasting · Official text, checked 8 November 2026
  2. IT Rules amendment of February 2026 — legislative update (opens in a new tab). Shardul Amarchand Mangaldas & Co · Secondary source, checked 7 November 2026
  3. Information Technology Act, 2000 (sections 66C, 66D, 66E, 67, 67A) (opens in a new tab). PRS Legislative Research (reproduction of the Act) · Secondary source, checked 8 November 2026
  4. Bharatiya Nyaya Sanhita, 2023 (Act 45 of 2023) (opens in a new tab). India Code · Official text, checked 8 November 2026

Legal references are for orientation only and are not legal advice. Applicability depends on the facts; consult a qualified professional.

Availability

Feature status, matched to the Phase 1 scope

  • Impersonation, privacy and harassment case types with URGENT priorityAvailable now
  • Evidence with SHA-256 fingerprints and timestampsAvailable now
  • Platform-complaint guidance (in guides) and approval gateAvailable now
  • Customer-submitted URLs fetched, snapshotted and classifiedAvailable now
  • Signposting to cybercrime.gov.in / 1930 and to professional reviewAvailable now
  • Automatic detection of look-alike social profilesPhase 2Needs Facebook, Instagram, X, LinkedIn and YouTube connectors
  • Ownership and authorisation verification (domain, Business Profile)Phase 2
  • Dedicated priority-response workflow and playbooksPending feasibilitySRS §10, Phase 3
  • Legal notices and court or law-enforcement escalation from inside Spy MonkPending feasibilityRequires professional review; not available yet
Available now
Available now5 items
Phase 2
Phase 22 items
Pending feasibility
Pending feasibility2 items

Questions

Impersonation and privacy — frequently asked

Someone has made a profile with my name and photo. What do I do first?

Take screenshots that show the profile URL, name, photo and date, and save the URL. Do not message the account and do not ask friends to report it en masse yet. Then file the platform's impersonation report with your ID. The guide on the first 48 hours sets out the order of steps.

How fast must a platform act in India?

Under the IT Rules 2021 as amended in February 2026, an intermediary must take reasonable steps to remove or disable access to content that impersonates a person, or that shows them in a private act or in artificially morphed images, within two hours of an individual's complaint, and its grievance officer must acknowledge complaints within 24 hours and resolve them within 7 days. These are legal duties on the platform; Spy Monk records whether they were met.

Can Spy Monk find out who is behind the account?

No, and we will not try. Only a court or a competent authority can direct a platform to disclose that information. Be cautious of anyone who claims they can tell you who is behind an account.

Is impersonation a crime?

It can be. The IT Act 2000 penalises identity theft (section 66C) and cheating by personation using a computer resource (section 66D), and the Bharatiya Nyaya Sanhita 2023 covers cheating by personation (section 319). Whether a particular case qualifies is for the police and the courts; report at cybercrime.gov.in or call 1930, and consult a qualified professional. This is not legal advice.

My phone number, address or Aadhaar image is on a website. Can it be removed from Google?

Google's policy allows requests to remove certain personal information from Search results — government ID numbers, bank details, images of ID documents or signatures, medical records, and contact details shared with malicious intent. Google notes that removal from Search does not remove the page from the web; the hosting site has to be asked separately. Spy Monk helps you prepare both requests.

What if the account says it is a fan page or parody?

Platforms allow parody, commentary and fan accounts, but generally require that they say so clearly in the name and bio and do not mislead people about affiliation. An account that uses your name and imagery without those signals, or that solicits money, is usually outside that exception. Note the specifics in the case before reporting.

Should I warn my customers publicly?

Usually yes, briefly and calmly: which account is genuine, that you never ask for advance payments by direct message, and where to report. Get the notice approved in Spy Monk before posting so the wording is consistent across channels.

Preserve first. Report second. Record everything.

Run a free audit to see what appears under your name today, then open a case the moment an impostor appears.

Run a free auditTrust Center

No card needed

Related