Differences
This shows you the differences between two versions of the page.
| — | fake-social-media-profile-takedown-india [2026/07/22 17:47] (current) – created - external edit 127.0.0.1 | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| + | ====== Someone Created Fake Social Media Profile in Your Name: Takedown India ====== | ||
| + | |||
| + | |||
| + | {{ : | ||
| + | |||
| + | {{htmlmetatags> | ||
| + | |||
| + | {{htmlmetatags> | ||
| + | |||
| + | <WRAP info> | ||
| + | **Quick Reply:** If a fake profile in your name appears on Instagram, Facebook, LinkedIn, X, WhatsApp Business, Telegram or a dating app, you have a 30-minute window to lock down evidence and a 24-hour right to platform removal under IT Rules 2021 Rule 3(2)(b). Screenshot the profile, capture the URL, file a report inside the app, send a written notice to the platform Grievance Officer, register a complaint at cybercrime.gov.in, | ||
| + | </ | ||
| + | |||
| + | ===== What this guide solves ===== | ||
| + | |||
| + | A fake profile in your name is not a harmless prank. It can drain money from your friends, ruin a job offer, scare your parents, and in matrimonial or dating contexts, cause lasting reputation damage. This guide gives a citizen-tested 30-minute action plan, an evidence checklist that holds up in a Magistrate court, the exact official complaint route, the threshold at which you must involve police, a sample takedown notice you can paste, and answers to the ten questions most victims ask in the first hour. | ||
| + | |||
| + | ===== Personal context: why minutes matter ===== | ||
| + | |||
| + | When a fake profile goes live, the impostor typically follows a fixed pattern. Hour one, they copy your photos and bio. Hour two to six, they send friend or follow requests to fifty to two hundred contacts they scraped from your real account. Hour six to twenty-four, | ||
| + | |||
| + | ===== The 30-minute action plan ===== | ||
| + | |||
| + | Run these steps in order. Do not skip ahead. Do not contact the impostor. | ||
| + | |||
| + | **Minutes 0 to 5: Lock down evidence** | ||
| + | |||
| + | - Open the fake profile on a phone and a laptop. Take a full screenshot of the profile page on both, including the username, display name, profile photo, bio, follower count, and any pinned post. | ||
| + | - On laptop, click the three-dot menu and "Copy link to profile" | ||
| + | - Take screenshots of three to five posts or stories, especially anything that quotes you, tags real people, or asks for money. | ||
| + | - If any contact has already received a message from the fake account, ask them to screenshot the full chat including the profile header and timestamps, and send those screenshots to you on a normal channel. | ||
| + | |||
| + | **Minutes 5 to 10: Public warning on your real account** | ||
| + | |||
| + | - Post a single story or status on your real account saying: "A fake profile using my photos is messaging my contacts. The fake handle is @example_fake. I will never ask anyone for money or OTP on social media. Please report and block." | ||
| + | - Pin this post or story for 24 hours. This single step has prevented more frauds than any platform takedown. | ||
| + | |||
| + | **Minutes 10 to 20: In-app report on every platform** | ||
| + | |||
| + | - On the fake profile, tap the three-dot menu, choose " | ||
| + | - On Instagram and Facebook, also open https:// | ||
| + | - On LinkedIn, use the " | ||
| + | - On X (Twitter), submit https:// | ||
| + | - On WhatsApp Business or normal WhatsApp, in the contact screen tap the number, scroll to " | ||
| + | - On Telegram, message @notoscam with the fake channel or username and the words " | ||
| + | - On dating apps (Tinder, Bumble, Hinge, Shaadi, Matrimony), use in-app " | ||
| + | |||
| + | **Minutes 20 to 30: Official channels** | ||
| + | |||
| + | - Open cybercrime.gov.in and file a complaint under " | ||
| + | - If the fake profile has already been used to ask anyone for money, OTP, or intimate photos, dial **1930** immediately and read your acknowledgement number. The 1930 desk can freeze suspect bank or UPI accounts within hours if you act fast. | ||
| + | - Email the platform Grievance Officer using the sample notice below. Under **IT (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, Rule 3(2)(b)**, the platform must take down impersonation content within 24 hours of receipt. | ||
| + | |||
| + | ===== Evidence checklist (the file every investigator wants) ===== | ||
| + | |||
| + | Build one folder on your laptop named with today' | ||
| + | |||
| + | * Full-page screenshot of the fake profile, captured on phone and on laptop, showing username, display name, photo, bio, and follower or friend count. | ||
| + | * Plain text file with the exact profile URL, numeric user ID where visible, account creation date if shown, and the date and time you discovered the fake. | ||
| + | * Screenshots of at least three posts or stories or status updates from the fake account, with timestamps visible. | ||
| + | * Screenshots of any direct messages the impostor sent to your contacts. Get these from the contacts on a separate channel and keep their phone numbers in a separate sheet. | ||
| + | * Your own real profile screenshot and URL, for comparison. | ||
| + | * One government photo ID scan (Aadhaar with number masked, or PAN, or passport, or driving licence). | ||
| + | * The 1930 call log entry if you called the helpline, and the cybercrime.gov.in acknowledgement PDF. | ||
| + | * If any contact actually paid money to the impostor, the UPI transaction screenshot, beneficiary VPA or account number, and amount. | ||
| + | * Email thread with the platform Grievance Officer, including the original notice, any automated reply, and the takedown confirmation. | ||
| + | |||
| + | Save this folder. Do not delete anything for at least three years. The same evidence supports civil defamation, criminal proceedings, | ||
| + | |||
| + | ===== Official complaint route, step by step ===== | ||
| + | |||
| + | **Step 1: National Cyber Crime Reporting Portal** | ||
| + | |||
| + | Go to https:// | ||
| + | |||
| + | Fill these fields. Incident date and time, suspected platform, suspect profile URL, your own profile URL, a clean 200 to 500 word narrative in plain English, and the evidence files. The portal accepts JPG, PNG and PDF up to 5 MB each. | ||
| + | |||
| + | Submit and save the acknowledgement number. The portal sends this to your mobile and email. Keep the PDF. | ||
| + | |||
| + | **Step 2: 1930 helpline if money is involved** | ||
| + | |||
| + | Dial **1930** from any phone in India. Read the acknowledgement number to the operator. They will create a freeze request on the suspect UPI handle or bank account. Speed matters. Most banks honour 1930 freezes within 30 minutes if the funds are still in the suspect account. | ||
| + | |||
| + | **Step 3: Written notice to platform Grievance Officer** | ||
| + | |||
| + | Send the sample notice below to the Grievance Officer email listed on the platform' | ||
| + | |||
| + | **Step 4: Grievance Appellate Committee if the platform refuses** | ||
| + | |||
| + | If the platform refuses takedown or does not reply within 24 hours for impersonation, | ||
| + | |||
| + | **Step 5: Sahyog portal for intermediary cooperation** | ||
| + | |||
| + | For high-impact cases (public figure impersonation, | ||
| + | |||
| + | **Step 6: Local cyber cell FIR** | ||
| + | |||
| + | Walk in to your nearest Cyber Cell with a printout of the cybercrime.gov.in acknowledgement, | ||
| + | |||
| + | ===== When platform reporting is enough, and when you need police ===== | ||
| + | |||
| + | You can usually stop at platform reporting plus a cybercrime.gov.in entry if all three are true. The fake profile has not yet messaged any contact for money or OTP. No morphed, intimate or doctored content is involved. No threat of violence, doxxing, or extortion has been made. | ||
| + | |||
| + | You must involve police, by FIR at the cyber cell, if any of the following is true. | ||
| + | |||
| + | * The impostor has demanded money, OTP, gift cards, crypto, or any payment from anyone in your name. | ||
| + | * Anyone has actually paid the impostor. | ||
| + | * The fake profile shares morphed, obscene, or intimate images, including AI-generated deepfakes. | ||
| + | * The impostor has threatened you, your family, or anyone else with violence, exposure, or harm. | ||
| + | * The fake profile is being used for matrimonial fraud, fake job offers, fake investment groups, or fake fundraisers. | ||
| + | * The fake profile impersonates you in a regulated profession (doctor, lawyer, chartered accountant, government officer) and offers services. | ||
| + | * The fake account targets a minor or shares content sexualising a minor. | ||
| + | |||
| + | In any of these cases, the offence is cognizable and the cyber cell can arrest without a warrant. Do not wait for the platform takedown before filing the FIR. Run both tracks in parallel. | ||
| + | |||
| + | ===== The Indian legal stack you can cite ===== | ||
| + | |||
| + | When you write to a platform, a Grievance Officer, or a cyber cell, the right legal citations move your file to the front of the queue. Use only the ones that actually apply. | ||
| + | |||
| + | **Bharatiya Nyaya Sanhita 2024 (BNS), in force since 1 July 2024** | ||
| + | |||
| + | * **Section 318 (cheating)** and especially **318(4) (cheating by personation)**. Punishment up to 7 years and fine. This is the core charge when a fake profile pretends to be you and induces anyone to part with money, property, or sensitive information. | ||
| + | * **Section 336 (forgery)** when the impostor fabricates documents, screenshots, | ||
| + | * **Section 351 (criminal intimidation)** if the fake account threatens violence, exposure, or harm. | ||
| + | * **Section 356 (defamation)** if the fake account publishes content that lowers your reputation. Punishment up to 2 years. | ||
| + | * **Section 79 (abetment)** if the impostor uses third parties to forward the fraud. | ||
| + | |||
| + | **Information Technology Act 2000, still in force for cyber offences** | ||
| + | |||
| + | * **Section 66C (identity theft)** for fraudulent use of any unique identification feature, including your photo, name, or signature. Punishment up to 3 years and fine up to one lakh rupees. | ||
| + | * **Section 66D (cheating by personation by using computer resource)**. This is the most directly applicable section for a fake online profile that defrauds anyone. Punishment up to 3 years and fine up to one lakh rupees. | ||
| + | * **Section 66E (privacy violation)** if the fake profile captures, publishes, or transmits any image of a private area of any person without consent. | ||
| + | * **Section 67 and 67A** for obscene or sexually explicit content. **Section 67B** if a minor is involved. | ||
| + | |||
| + | **IT (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021** | ||
| + | |||
| + | * **Rule 3(1)(b)** lists impersonation as content the user must not host. **Rule 3(2)(b)** gives the Grievance Officer a 24-hour window to remove or disable access for content "in the nature of impersonation in an electronic form". | ||
| + | * **Rule 3(2)(a)** requires the platform to acknowledge the grievance within 24 hours and dispose it within 15 days, except for impersonation which is the 24-hour bucket. | ||
| + | * **Rule 7A** establishes the Grievance Appellate Committee at gac.gov.in for appeals. | ||
| + | |||
| + | **Copyright Act 1957** | ||
| + | |||
| + | If the fake profile uses your photographs without permission, you, as the author of those photos, hold the copyright. Send a takedown notice under **Section 51 (infringement)** and **Section 55 (civil remedies)**. The platform must remove infringing content under Section 79(3)(b) of the IT Act read with Rule 3(2)(b) of IT Rules 2021. The impostor cannot claim fair use under Section 52 because impersonation is not a permitted purpose. | ||
| + | |||
| + | **Advertising Standards Council of India (ASCI)** | ||
| + | |||
| + | If the fake profile endorses products or services in your name, file a complaint at https:// | ||
| + | |||
| + | ===== Sample takedown notice you can paste ===== | ||
| + | |||
| + | Replace [Name], [State], and the placeholders. Do not use anyone' | ||
| + | |||
| + | < | ||
| + | To: Grievance Officer, [Platform Name] | ||
| + | Email: [grievance email from platform India Grievance page] | ||
| + | Cc: [email protected] | ||
| + | |||
| + | Subject: Urgent takedown notice under Rule 3(2)(b) IT Rules 2021 - Impersonation of [Name] | ||
| + | |||
| + | Sir or Madam, | ||
| + | |||
| + | I, [Name], an Indian citizen residing in [City, State], with verified profile at | ||
| + | [your real profile URL], hereby give formal notice of an impersonation account on | ||
| + | your platform that is causing imminent harm to my reputation and to my contacts. | ||
| + | |||
| + | 1. Fake profile URL: [fake profile URL] | ||
| + | 2. Fake profile handle or username: [@fake_handle] | ||
| + | 3. Date and time discovered: [DD-MM-2026 HH:MM IST] | ||
| + | 4. Nature of impersonation: | ||
| + | | ||
| + | UPI / It is sharing fabricated screenshots / It has solicited intimate images / | ||
| + | | ||
| + | |||
| + | 5. Evidence attached: | ||
| + | a) Screenshots of the fake profile (Annexure A) | ||
| + | b) Screenshots of fraudulent messages sent to my contacts (Annexure B) | ||
| + | c) Government photo identification, | ||
| + | d) Acknowledgement from cybercrime.gov.in, | ||
| + | |||
| + | 6. Legal basis for takedown: | ||
| + | - Rule 3(1)(b) and Rule 3(2)(b) of the Information Technology | ||
| + | | ||
| + | - Section 66C and Section 66D of the Information Technology Act 2000 | ||
| + | - Section 318(4) and Section 336 of the Bharatiya Nyaya Sanhita 2024 | ||
| + | - Section 51 of the Copyright Act 1957 (the profile photographs are my own | ||
| + | | ||
| + | |||
| + | 7. Action requested: | ||
| + | a) Removal or disabling of access to the impersonation account within | ||
| + | | ||
| + | Rule 3(2)(b) IT Rules 2021. | ||
| + | b) Preservation of all account logs, IP addresses, device identifiers, | ||
| + | and payment records for at least one hundred and eighty days, for | ||
| + | | ||
| + | c) Written confirmation of takedown to my email at [your email]. | ||
| + | |||
| + | 8. Notice of escalation: If the platform does not act within twenty four | ||
| + | | ||
| + | at gac.gov.in under Rule 7A of IT Rules 2021, and a written | ||
| + | | ||
| + | |||
| + | Sincerely, | ||
| + | [Name] | ||
| + | [City, State] | ||
| + | [Date] | ||
| + | [Mobile number] | ||
| + | [Email] | ||
| + | </ | ||
| + | |||
| + | ===== Reputation protection while the takedown is in motion ===== | ||
| + | |||
| + | The takedown can take 24 hours on a good day and 72 hours on a bad one. In the meantime, protect your reputation in three layers. | ||
| + | |||
| + | **Layer 1: Your own audience.** Pin a story or status on your real account. Repeat it twice in the first 24 hours. Use the same wording every time so people recognise it. | ||
| + | |||
| + | **Layer 2: Family WhatsApp groups.** Forward a one-line message: "Fake profile using my photos is doing the rounds. Please ignore and do not pay anything." | ||
| + | |||
| + | **Layer 3: Search and verification.** Many people will Google your name after a suspicious message. Update your LinkedIn headline and your personal website (if any) with a one-line note that says: "If anyone receives a money request in my name on any social platform, it is fraud. Please report to cybercrime.gov.in." | ||
| + | |||
| + | Do not engage with the impostor. Do not reply to their messages. Do not threaten them. Every interaction can be screenshotted, | ||
| + | |||
| + | ===== Special cases by platform ===== | ||
| + | |||
| + | **Instagram.** Use the impersonation form at https:// | ||
| + | |||
| + | **Facebook.** Use https:// | ||
| + | |||
| + | **LinkedIn.** Email [email protected] from the email tied to your real LinkedIn account. Mention " | ||
| + | |||
| + | **X (Twitter).** Use https:// | ||
| + | |||
| + | **WhatsApp Business impersonation.** Email [email protected] with the impostor' | ||
| + | |||
| + | **WhatsApp personal account hijack.** If your own number has been taken over and the impostor is using your name with your contacts, send "Lost or stolen, please disable my account" | ||
| + | |||
| + | **Telegram.** Forward the fake channel or user link to @notoscam. For impersonation of a brand or public person, also use the in-app " | ||
| + | |||
| + | **Dating apps.** Tinder, Bumble, Hinge, Shaadi, Matrimony and others all have " | ||
| + | |||
| + | **Job and freelance platforms.** Naukri, Indeed, Upwork and Fiverr each have a " | ||
| + | |||
| + | ===== Common mistakes that wreck a complaint ===== | ||
| + | |||
| + | * **Messaging the impostor.** It is tempting. It is also the single fastest way to lose the case. Every reply you send becomes part of the chat that the impostor can edit and screenshot. | ||
| + | * **Deleting your old posts.** People delete photos thinking it stops the impersonation. It does not. The impostor already has them. Deletion only weakens your copyright claim because the originals on your account are your strongest authorship evidence. | ||
| + | * **Filing only on one platform.** Most impostors run parallel fake profiles on three to five platforms with the same photos. Run an image reverse-search on Google Lens and Yandex with your own profile photo, and look for matches on each major platform. | ||
| + | * **Skipping the cybercrime.gov.in acknowledgement.** The platforms move faster when your notice cites a real NCRP reference number. A complaint without that number reads like a private dispute. | ||
| + | * **Writing a vague narrative.** Two hundred specific words beat two thousand emotional words. Stick to dates, URLs, exact messages, and amounts. | ||
| + | * **Waiting for the platform.** File the platform report, the cybercrime.gov.in complaint, and (if money is involved) the 1930 call in the same thirty-minute window. Each speeds up the others. | ||
| + | * **Not preserving the evidence folder.** A reversed takedown, an appeal, or a defamation suit two years later all rely on the same folder. Back it up to two locations. | ||
| + | |||
| + | ===== Real-life example ===== | ||
| + | |||
| + | <WRAP center round box> | ||
| + | In April 2026, a 31-year-old marketing manager in Pune, [Name], discovered a fake Instagram account using her photos. Within 90 minutes she had posted a public warning on her real account, screenshotted the fake profile, filed an in-app impersonation report, lodged NCRP complaint **31504XXXXXXXX** at cybercrime.gov.in, | ||
| + | </ | ||
| + | |||
| + | ===== Frequently asked questions ===== | ||
| + | |||
| + | ==== Can I really get a fake profile taken down in 24 hours? ==== | ||
| + | |||
| + | Yes, in most impersonation cases. Rule 3(2)(b) of IT Rules 2021 forces the platform Grievance Officer to act on impersonation within 24 hours of receipt. The clock starts when your email lands, not when someone reads it. In practice, well-drafted notices with screenshots and an NCRP number get acted on in 24 to 48 hours on Instagram, Facebook, LinkedIn and X. Niche platforms can take up to 72 hours. If you cross the deadline, escalate to the Grievance Appellate Committee at gac.gov.in. | ||
| + | |||
| + | ==== I cannot find the Grievance Officer email for a platform. What do I do? ==== | ||
| + | |||
| + | By law, every significant social media intermediary that operates in India must publish the Grievance Officer' | ||
| + | |||
| + | ==== Should I file an FIR if the fake profile has not yet defrauded anyone? ==== | ||
| + | |||
| + | For pure impersonation with no money, no threats and no obscene content, an NCRP complaint plus a written notice to the platform is usually enough. File an FIR if any of the following happen: anyone is approached for money, OTP, gift cards or crypto in your name; the impostor threatens you, your family, or any contact; intimate or morphed images appear; or the impersonation continues after platform takedown. FIRs are free and the law (BNSS Section 173) requires the officer to register one for cognizable offences. | ||
| + | |||
| + | ==== Do I have to give my Aadhaar number to the platform? ==== | ||
| + | |||
| + | No. Mask the number with paper or a black box and leave only the photo and name visible. Most platforms accept a masked Aadhaar, PAN, passport, voter ID, or driving licence. The Unique Identification Authority of India (UIDAI) advises citizens to mask the Aadhaar number whenever the full number is not strictly required. The platform only needs to verify your face matches your real profile photo. | ||
| + | |||
| + | ==== What if the impostor lives outside India? ==== | ||
| + | |||
| + | You can still file at cybercrime.gov.in. The platform is responsible under IT Rules 2021 regardless of where the impostor is based, because the platform "makes available" | ||
| + | |||
| + | ==== My fake profile has more followers than my real one. Why? ==== | ||
| + | |||
| + | Impostors often buy follower packages to make the fake account look authoritative. Mention this in your notice. Higher follower count on a fake account is itself an aggravating factor under Rule 3(1)(b) IT Rules 2021 because it amplifies the harm. The platform must remove the account on impersonation grounds regardless of follower count. | ||
| + | |||
| + | ==== Can I sue the platform for defamation? ==== | ||
| + | |||
| + | Only if the platform refuses to take down the impersonation after the 24-hour Rule 3(2)(b) window and you can show actual harm. Most cases settle at the takedown stage. If you must escalate, the standard path is a defamation suit before the District Court under BNS Section 356, plus an injunction application against the platform. Talk to a lawyer first; do not file in person without one. | ||
| + | |||
| + | ==== What about deepfake or AI-generated impostor profiles? ==== | ||
| + | |||
| + | Deepfakes are covered by the same legal stack, plus the **Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules 2025** which specifically target " | ||
| + | |||
| + | ==== The impostor sent intimate photos to my fiance or family. What now? ==== | ||
| + | |||
| + | This is sextortion plus impersonation. Call **1930** immediately and walk in to the cyber cell the same day. Insist on an FIR under BNS Section 318(4), Section 351 (criminal intimidation), | ||
| + | |||
| + | ==== Will my own social media accounts be suspended during the investigation? | ||
| + | |||
| + | No. Your real accounts are unaffected by the FIR or NCRP complaint. The investigation targets the fake account and the device or IP behind it. If anything, platforms often add a verification badge or a profile-protection flag to real accounts of victims after an impersonation case is acknowledged. Keep your real account active so the platform can match identities. | ||
| + | |||
| + | ===== FAQ schema note ===== | ||
| + | |||
| + | This page uses the canonical `==== Q? ====` H3 heading pattern for FAQs so that the sitewide `/ | ||
| + | |||
| + | ===== Related on RTI Wiki ===== | ||
| + | |||
| + | * [[how-to-report-fake-social-media-profiles-india|How to report fake social media profiles in India]] | ||
| + | * [[instagram-seller-money-blocked-recovery-india|Instagram seller money blocked recovery]] | ||
| + | * [[fake-linkedin-recruiter-scam-india|Fake LinkedIn recruiter scam]] | ||
| + | * [[1930-helpline-cyber-fraud-script|1930 helpline cyber fraud script]] | ||
| + | * [[citizen-rti-playbook|Citizen RTI playbook]] | ||
| + | * [[middle-class-traps|Middle class traps]] | ||
| + | * [[whatsapp-otp-fraud-explained-india|WhatsApp OTP fraud explained]] | ||
| + | * [[telegram-scam-vs-whatsapp-scam-india|Telegram scam vs WhatsApp scam]] | ||
| + | |||
| + | ===== External sources ===== | ||
| + | |||
| + | * National Cyber Crime Reporting Portal: https:// | ||
| + | * 1930 cyber fraud helpline (Indian Cybercrime Coordination Centre, I4C) | ||
| + | * IT (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, Rule 3(2)(b): https:// | ||
| + | * Grievance Appellate Committee: https:// | ||
| + | * Sahyog portal (intermediary cooperation, | ||
| + | * IT Act 2000, Sections 66C, 66D, 66E: https:// | ||
| + | * Bharatiya Nyaya Sanhita 2023 (in force from 1 July 2024), Sections 318, 336, 351, 356: https:// | ||
| + | * Bharatiya Nagarik Suraksha Sanhita 2023, Section 173: https:// | ||
| + | * Copyright Act 1957, Sections 51, 52, 55: https:// | ||
| + | * Advertising Standards Council of India: https:// | ||
| + | * Instagram impersonation form: https:// | ||
| + | * Facebook impersonation form: https:// | ||
| + | * LinkedIn trust and safety: [email protected] | ||
| + | * X impersonation form: https:// | ||
| + | |||
| + | ===== Hero image prompt ===== | ||
| + | |||
| + | A wide editorial illustration in a calm Indian newsroom palette of indigo, teal and ivory. Foreground: a translucent smartphone floating above an open notebook, the phone screen split in half. Left half shows a verified social profile with a green check mark; right half shows a near-identical profile with a faint red duplicate watermark and a magnifying glass hovering over it. Behind the phone, three softly glowing legal seals in a row representing BNS, IT Act, and IT Rules 2021. A small clock in the corner reads 0:24, suggesting the 24-hour takedown window. No real faces, no real logos, no text on the seals beyond stylised emblems. Subtle paper texture, soft top-down light, professional editorial poster style, 16:9. | ||
| + | |||
| + | {{tag> | ||