How to Report Fake Social Media Profiles India (2025–2026)

Last reviewed: 1 September 2026.

Imagine someone creates a fake Facebook profile using your photographs and starts soliciting money from your contacts. This is a common form of online impersonation in India — and the law gives you clear, parallel routes to act: an online complaint at the National Cybercrime Reporting Portal, in-platform reporting, a written grievance to the platform's India Grievance Officer, and an FIR with the police. Acting fast matters, because fake profiles are often deleted by the fraudster once they suspect reporting.

Citizen Crisis Response Network
Fake profiles lead to extortion, reputation damage, and financial fraud. Report as early as possible to freeze evidence. Use the Cyber Crime Portal (cybercrime.gov.in), platform-native tools, and a local police FIR in parallel—never wait.

To report a fake social media profile in India: 1) Screenshot all evidence (profile, posts, messages). 2) File an online complaint at cybercrime.gov.in (National Cybercrime Reporting Portal) as early as possible. 3) Use in-platform reporting (Facebook/Instagram/X “Report” function). 4) Lodge an FIR at the local Cyber Cell — cheating by personation is BNS Section 319, and where money is dishonestly obtained from your contacts, BNS Section 318(4) (cheating, the old IPC 420). 5) Send a written grievance to the platform's Resident Grievance Officer under the IT Rules 2021. 6) Preserve acknowledgment receipts. 7) Follow up regularly until the profile is removed and police act.

• Why fake profiles are a criminal offense in India
• Which laws apply—BNS sections you must cite
• Step 1: Collect and preserve digital evidence
• Step 2: Report through National Cybercrime Reporting Portal
• Step 3: Platform-specific reporting (Facebook Instagram X LinkedIn)
• Step 4: Lodge FIR with local Cyber Cell
• Step 5: Grievance officer notice under IT Rules 2021
• What the police investigation involves
• Sample FIR complaint text for fake profile
• Touchpoints: When to escalate
• Frequently asked questions
• Myth vs reality table

Creating or operating a fake social media profile that impersonates another person, uses stolen photographs, or defrauds third parties is punishable under the Bharatiya Nyaya Sanhita 2023 (BNS), which came into force on 1 July 2024 and replaced the Indian Penal Code. Cheating by personation is punishable with imprisonment up to 5 years, and where the fake profile dishonestly induces delivery of money or property, the offence carries up to 7 years; the gravity rises further if the fake profile is used for extortion, defamation, or financial fraud. Stricter digital-evidence procedures now apply under the Bharatiya Nagarik Suraksha Sanhita 2023 (BNSS) and the Bharatiya Sakshya Adhiniyam 2023, the new code of evidence that replaced the Indian Evidence Act.

Fake profiles harm individuals through reputation damage, financial loss (fraudulent loan applications, scams targeting contacts), matrimonial fraud, and blackmail. Women and public figures are disproportionately targeted. The Information Technology Act 2000 remains fully in force, and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021 impose obligations on social media platforms to act on grievances, failing which platforms risk losing safe-harbour immunity under Section 79 of the IT Act.

Warning — If the fake profile solicits money, shares intimate images, or threatens violence, additional and more serious BNS provisions apply — including Section 308 (extortion), Section 356 (defamation), and Section 296 (obscene acts). Treat such cases as urgent and report immediately.

Reporting mechanisms have improved significantly: the National Cybercrime Reporting Portal (cybercrime.gov.in), managed by the Ministry of Home Affairs and the Indian Cyber Crime Coordination Centre (I4C), offers complaint tracking and routing to State Cyber Cells. Citizens receive an acknowledgment number on filing, and jurisdictional police follow up with the complainant.

When filing a complaint or FIR, the following BNS provisions are the ones that typically apply to a fake-profile case:

• Section 319 — Cheating by personation (impersonation). Imprisonment up to 5 years, or fine, or both. This is the core offence when a fake profile pretends to be you.
• Section 318(4) — Cheating that dishonestly induces delivery of property (the provision corresponding to the old IPC Section 420). Imprisonment up to 7 years and fine. Applies when the fake profile actually obtains money or property from your contacts.
• Section 336 — Forgery. Where the forgery is intended to be used for cheating, Section 336(3) provides for imprisonment up to 7 years and fine. Relevant if forged documents, photos, or credentials are used.
• Section 356 — Defamation. If the fake profile posts defamatory content about you or others.
• Section 308 — Extortion. If the fake profile demands money or favours, or threatens harm.
• Section 296 — Obscene acts. If the fake profile shares morphed intimate images or obscene messages.

Under the BNSS, you can report a cognizable offence at any police station in India irrespective of where the offence was committed (Section 173) — this is the “Zero FIR” mechanism, and the receiving station must forward it to the jurisdictional Cyber Cell. This removes the old barrier where citizens were turned away for “jurisdiction” reasons.

Additionally, the IT Act 2000 Section 66C (identity theft) and Section 66D (cheating by personation using a computer resource) apply directly to online impersonation, and remain in force alongside the BNS. Courts accept parallel charges under both the BNS and the IT Act.

Citizen tip — Cite both the relevant BNS sections and the IT Act 2000 sections in your FIR so the investigating officer applies the strongest applicable law.

Digital evidence is fragile—fake profiles are often deleted within hours once the fraudster suspects reporting. Act immediately:

Screenshots (mandatory)

• Full profile page showing profile photo, cover photo, username, URL, bio, and “About” section.
• All posts, especially those impersonating you, soliciting money, or defaming.
• Comments and reactions if they show engagement or victim interaction.
• Private messages or chat threads (screenshot entire conversation thread with timestamps).
• Friend/follower list if accessible (shows scale of fraud).

Metadata preservation

• Copy the exact profile URL (e.g., facebook.com/fake.profile.12345).
• Note date and time of discovery.
• Record your own profile URL for comparison.
• Use the browser “Save Page As” (Ctrl+S) to save the HTML source—this captures metadata that can support authenticity.

Third-party evidence

• If contacts received fraud messages, request they screenshot and forward to you.
• If money was transferred, collect bank statements, UPI transaction IDs, screenshots of payment requests.
• Email or SMS logs if the fraudster contacted anyone outside the platform.

Save all files in a dedicated folder with clear naming (e.g., “FakeProfile_Evidence_2026-03-15”). Keep a backup on cloud storage with timestamps. Print one hard copy set for police submission.

Do this immediately — Use a screen-recording app (Windows Game Bar, macOS QuickTime, mobile screen recorder) to capture a live video walkthrough of the fake profile. A video can show real-time content that static screenshots may miss and helps reduce later claims of fabrication.

The National Cybercrime Reporting Portal (https://cybercrime.gov.in) is the first and fastest channel. It is managed by the Indian Cyber Crime Coordination Centre (I4C), Ministry of Home Affairs, and routes complaints to State and Union Territory Cyber Cells.

Filing process (about 10 minutes)

1. Visit https://cybercrime.gov.in. 2. Click “Report Other Cyber Crime” (or “Report Cyber Crime Related to Women/Children” if intimate images are involved). 3. Choose to file anonymously or to log in (login via mobile OTP is better for follow-up). 4. Select the complaint category that most closely matches online impersonation / social-media fraud (the portal's category labels are revised from time to time; choose the closest match). 5. Fill the mandatory fields:

• Incident details: Date, time, platform name (Facebook/Instagram/X/LinkedIn/other).
• Suspect details: Fake profile URL, username, any known phone/email used.
• Loss/Impact: Financial loss amount (₹), reputation damage, threat type.
• Evidence upload: Attach screenshots in the formats and size limits the portal allows.

6. Submit, and note the Acknowledgment Number.

You receive an SMS and email confirmation, and the complaint is routed to your State Cyber Cell. Jurisdictional police follow up with you for physical evidence collection or FIR registration.

Tip — Reporting on the portal runs in parallel with your platform grievance and your FIR. Pursuing all three together generally produces faster takedown than relying on any one channel.

Track your complaint: Login to cybercrime.gov.in → “Track Your Complaint” → enter the acknowledgment number to see status updates.

Use in-platform reporting tools simultaneously with the Cybercrime Portal. Significant social media intermediaries have India-based Grievance Officers under the IT Rules 2021, and impersonation content is in the category for which the Rules require expedited removal.

Facebook / Meta (Facebook & Instagram)

• Visit the fake profile.
• Click the three-dot menu (•••) → “Find support or report profile”.
• Choose “Pretending to be someone” → “Me” → upload government ID proof (Aadhaar, PAN, Passport) to prove you are the real person.
• Submit. Meta reviews impersonation reports and disables the profile if the evidence is clear.
• Meta publishes a grievance-redressal channel and Grievance Officer contact for India users; use the current contact listed on Meta's India grievance page, with the subject line “Urgent: Impersonation Report – [Your Name]” and attach evidence plus your Cybercrime Portal acknowledgment number.

X (formerly Twitter)

• Visit the fake profile → click the three-dot icon → “Report” → “They're pretending to be me or someone else”.
• Fill the form with your verified account details or ID proof.
• Use the current Grievance Officer contact published on X's India grievance page, with the subject “Impersonation – Urgent Legal Complaint”.

Instagram

• Same Meta process as Facebook. Use the in-app “Report” → “It's pretending to be someone else” → upload ID.
• Instagram has a dedicated impersonation form: visit https://help.instagram.com/contact/636276399721841 (works logged out) to report even if you don't have an Instagram account yourself.

LinkedIn

• Visit the fake profile → click “More” → “Report / Block” → “Fake profile”.
• Use LinkedIn's published India grievance/legal contact to send your complaint with evidence and your Cybercrime acknowledgment.

Most citizens miss this — Under the IT Rules 2021, the platform's Grievance Officer must acknowledge your complaint within 24 hours and resolve it within 15 days; for impersonation and morphed/intimate content (Rule 3(2)(b)), the Rules require the content to be removed within 24 hours. If the Grievance Officer's response does not satisfy you (or you get no response), you can appeal to the Grievance Appellate Committee (GAC) set up by the Government within 30 days.

An FIR (First Information Report) under the BNSS is the trigger for criminal prosecution. A Cybercrime Portal complaint is administrative; the FIR triggers formal investigation and arrest powers.

How to lodge

• Visit your district/city Cyber Cell or nearest police station. Under BNSS Section 173 (Zero FIR), any police station in India must record information about a cognizable offence regardless of jurisdiction.
• Carry:
  • Printed evidence bundle (screenshots, chat logs, bank statements).
  • Cybercrime Portal acknowledgment printout.
  • Your government ID (Aadhaar, PAN, Passport).
  • Written complaint (see sample below).
• Insist on FIR registration. Police cannot refuse to register an FIR for a cognizable offence. If refused, cite BNSS Section 173 and escalate to the senior officer or duty magistrate.

What to expect

• For a cognizable offence, information must be recorded and an FIR registered; you are entitled to a free copy of the FIR.
• An investigating officer (IO) is assigned to the case.
• The IO records your detailed statement; a statement before a Magistrate can be recorded under BNSS Section 183.

Warning — If the police delay or refuse to register an FIR, you can file a private complaint before the jurisdictional Magistrate under BNSS Section 223, and the Magistrate can direct the police to register and investigate. You can also approach the State Cyber Crime Nodal Officer (contact directory at https://cybercrime.gov.in).

After the FIR, send a formal written grievance to the platform's Resident Grievance Officer (RGO) in India. The IT Rules 2021 require every significant social media intermediary to appoint an India-based Grievance Officer and to acknowledge grievances within 24 hours and resolve them within 15 days (with faster removal for impersonation/intimate content under Rule 3(2)(b)).

Format (send via email + speed post to the RGO's registered address):

To,
The Resident Grievance Officer
[Platform Name – e.g., the entity named on the platform's India grievance page]
[Registered Address – find it on the platform's India grievance/compliance page]

Subject: Legal Notice – Immediate Removal of Fake/Impersonation Profile – IT Rules 2021 Rule 3(2)(b)

Ref: FIR No. [XXX/2026], Police Station [Name], Cybercrime Portal Ack. No. [ack number]

Date: [DD/MM/YYYY]

Madam/Sir,

I, [Your Full Name], residing at [Address], Aadhaar No. [XXXX XXXX XXXX], hereby lodge a formal grievance under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, Rule 3(1)(d) and 3(2)(b).

FACTS:
1. A fake profile impersonating me has been created on your platform with URL: [Fake Profile URL].
2. The profile uses my name, photographs, and personal information without consent.
3. The profile has been used to [solicit money / defame / harass] [list specific harm].
4. I have filed FIR No. [XXX/2026] dated [DD/MM/YYYY] at [Police Station] under BNS Sections 319, 318(4), 336, 356 and IT Act Section 66C/66D.
5. Cybercrime Portal Complaint No. [ack number] filed on [DD/MM/YYYY].

LEGAL DEMAND:
Under the IT Rules 2021, Rule 3(2)(b), you are required to:
a) Acknowledge this grievance within 24 hours.
b) Remove/disable the impersonation profile within the time prescribed by Rule 3(2)(b).
c) Provide IP logs, device IDs, and account-creation metadata to the investigating officer [IO Name, Phone] at [Police Station], on receipt of lawful process.

CONSEQUENCE OF NON-COMPLIANCE:
Failure to comply may result in:
i) Loss of safe-harbour immunity under IT Act Section 79.
ii) Escalation to the Grievance Appellate Committee under the IT Rules 2021.
iii) A civil suit for reputation harm and mental agony.

Evidence annexed: [List screenshots, FIR copy, Cybercrime acknowledgment].

I expect written confirmation of profile removal to my email [your email] and mobile [your phone].

Yours faithfully,
[Your Name]
[Signature]
[Date]

Keep proof of delivery (email read receipt, speed post tracking). If the Grievance Officer does not respond or you are dissatisfied with the response, escalate to the Grievance Appellate Committee (GAC) within 30 days.

Once an FIR is registered, the investigating officer (IO) will typically:

Early steps

• Record your detailed statement (a statement before a Magistrate may be recorded under BNSS Section 183).
• Issue notice to the platform's India office for disclosure of subscriber information, IP logs and metadata, using lawful process (IT Act Section 69/69B and the applicable BNSS provisions for production of documents and electronic records).
• Ask the platform to preserve/freeze the fake profile and associated data.

Tracing the suspect

• Obtain the platform's technical data (IP address, device ID, login timestamps, linked email/phone).
• Trace the suspect via ISP records, payment trails (if money was involved), or other digital footprints.
• Record statements of affected contacts/victims.

Arrest and forensics

• Arrest the suspect if identified. Whether an offence is cognizable or bailable depends on the specific section invoked and the facts.
• Send digital evidence to the State Forensic Science Laboratory (SFSL) Cyber Division for authentication.

Completing the investigation

• File the chargesheet before the Magistrate within the time limits prescribed by the BNSS, or seek an extension where the law allows. Under the BNSS, the IO is also required to keep the informant/victim updated on the progress of the investigation (Section 193 provides for informing the victim of progress within 90 days).

Citizen tip — Under BNSS Section 193(3)(ii), the investigating officer must keep you, as the informant or victim, informed of the progress of the investigation within ninety days. Copies of the police report and prosecution documents are supplied to the accused under BNSS Section 230 once the police file the chargesheet. You can also engage an advocate to represent your interests during the trial and track the case.

You can check investigation status via your State Police citizen portal (for example, https://citizen.mahapolice.gov.in for Maharashtra) or by filing an RTI application to the Police Station under the RTI Act 2005 asking for the “Status of FIR No. XXX/2026 investigation as on [date].”

Use this template at the Cyber Cell or police station:

To,
The Station House Officer / Cyber Cell In-Charge
[Police Station Name]
[City, State]

Subject: Complaint for Registration of FIR – Fake Social Media Profile / Impersonation / Cheating

Date: [DD/MM/YYYY]

Sir/Madam,

I, [Your Full Name], S/o or D/o [Parent Name], aged [XX] years, residing at [Full Address], Aadhaar No. [XXXX XXXX XXXX], Mobile [10-digit], Email [your email], hereby lodge a complaint under Bharatiya Nyaya Sanhita 2023 Sections 319, 318(4), 336, 356 and IT Act 2000 Sections 66C and 66D against unknown person(s) for the following criminal acts:

FACTS IN CHRONOLOGICAL ORDER:

1. On [DD/MM/YYYY], I discovered a fake profile on [Facebook / Instagram / X / LinkedIn] with URL [paste full URL].

2. The profile uses my name "[Your Name]", my photographs [specify which photos – e.g., profile picture taken in 2024 at Delhi], and falsely claims to be me.

3. The fake profile has [XXX] friends/followers and has posted [number] posts/messages impersonating me.

4. Specifically, the profile has:
   a) Sent messages to my contacts [Name 1, Name 2] soliciting money of ₹[amount] on [date] for a false emergency [attach screenshots].
   b) Posted defamatory content stating "[quote exact defamatory text]" on [date], damaging my reputation [attach screenshot].
   c) Shared morphed/intimate images without consent on [date] [attach screenshot if applicable and non-explicit].

5. My contact [Victim Name, Phone] transferred ₹[amount] to UPI ID [fraudster UPI] / Bank Account [fraudster account number] on [date] believing the fake profile to be me [attach bank statement / UPI screenshot].

6. I have filed an online complaint at the National Cybercrime Reporting Portal (cybercrime.gov.in) on [date] and received Acknowledgment No. [ack number].

7. I have reported the profile to [Platform Name] Grievance Officer on [date] via email [mention email] but the profile remains active as of [today's date].

OFFENCES COMMITTED:

The accused has committed offences punishable under:
- BNS Section 319: Cheating by personation – up to 5 years + fine.
- BNS Section 318(4): Cheating, dishonestly inducing delivery of property – up to 7 years + fine.
- BNS Section 336: Forgery (Section 336(3) where intended for cheating – up to 7 years + fine).
- BNS Section 356: Defamation.
- IT Act 2000 Section 66C: Identity theft – up to 3 years + fine up to ₹1 lakh.
- IT Act 2000 Section 66D: Cheating by personation using a computer resource – up to 3 years + fine up to ₹1 lakh.

PRAYER:

I request you to:
1. Register an FIR immediately under the above sections.
2. Seek preservation/freezing of the fake profile data.
3. Issue notice to [Platform Name] India for IP logs, device ID, subscriber details.
4. Trace and arrest the accused.
5. Recover the fraudulent amount of ₹[XXX] from the accused.
6. Provide me with the FIR copy and case number for legal proceedings.

I enclose the following evidence:
- Annexure A: Screenshots of fake profile.
- Annexure B: Screenshots of fraud messages/posts.
- Annexure C: Bank statement / UPI transaction proof.
- Annexure D: Cybercrime Portal acknowledgment.
- Annexure E: My government ID proof (Aadhaar / PAN copy).

I am ready to provide further evidence and testify as required.

Yours faithfully,

[Your Signature]
[Your Name]
[Date]

Mobile: [10-digit]
Email: [your email]

Print on plain paper, sign, attach annexures, and submit. Insist on receiving a stamped acknowledgment copy immediately.

If FIR refused or delayed

• Approach the Superintendent of Police (Cyber) or the State Cyber Crime Nodal Officer (contact directory at https://cybercrime.gov.in).
• File a private complaint before the jurisdictional Magistrate under BNSS Section 223; the Magistrate can direct the police to register and investigate.
• Send a written representation to the State DGP citing the duty to register an FIR for a cognizable offence under BNSS Section 173.

If the investigation stalls

• File an RTI application to the Police Station asking for the investigation status.
• Approach the supervising officer or the Magistrate seized of the matter.

If the platform does not remove the profile

• Escalate to the Grievance Appellate Committee (GAC) under the IT Rules 2021 within 30 days.
• Where warranted, file a writ petition in the High Court under Article 226.

Note on free speech and impersonation — The Supreme Court in Shreya Singhal v. Union of India (2015) 5 SCC 1 struck down Section 66A of the IT Act as unconstitutionally vague, while upholding the framework under which intermediaries act on valid legal process. Impersonation and fraud are not protected speech, and remain punishable under the BNS and the IT Act.

Run these steps in order. Do not skip ahead. Do not contact the impostor.

Minutes 0 to 5: Lock down evidence

- Open the fake profile on a phone and a laptop. Take a full screenshot of the profile page on both, including the username, display name, profile photo, bio, follower count, and any pinned post. - On laptop, click the three-dot menu and “Copy link to profile”. Paste that URL into a text file. Also paste the numeric user ID if visible in the URL. - Take screenshots of three to five posts or stories, especially anything that quotes you, tags real people, or asks for money. - If any contact has already received a message from the fake account, ask them to screenshot the full chat including the profile header and timestamps, and send those screenshots to you on a normal channel.

Minutes 5 to 10: Public warning on your real account

- Post a single story or status on your real account saying: “A fake profile using my photos is messaging my contacts. The fake handle is @example_fake. I will never ask anyone for money or OTP on social media. Please report and block.” - Pin this post or story for 24 hours. This single step has prevented more frauds than any platform takedown.

Minutes 10 to 20: In-app report on every platform

- On the fake profile, tap the three-dot menu, choose “Report” then “Pretending to be someone” then “Me”. Submit your real profile link as proof. - On Instagram and Facebook, also open https://www.facebook.com/help/contact/295309487309948 and submit the dedicated impersonation form with your government photo ID. This is the fastest takedown path. - On LinkedIn, use the “Report this profile” flow and additionally email [email protected] with your real profile URL, the fake profile URL, and a photo of your PAN or Aadhaar with the number masked. - On X (Twitter), submit https://help.x.com/en/forms/authenticity/impersonation along with the fake handle URL. - On WhatsApp Business or normal WhatsApp, in the contact screen tap the number, scroll to “Report contact”, tick “Block and report”. For Business profile impersonation, also email [email protected]. - On Telegram, message @notoscam with the fake channel or username and the words “impersonation, my real profile is”. - On dating apps (Tinder, Bumble, Hinge, Shaadi, Matrimony), use in-app “Report” then “Fake profile” and follow with an email to their support address including the fake profile URL.

Minutes 20 to 30: Official channels

- Open cybercrime.gov.in and file a complaint under “Report Other Cybercrime” then “Social Media Crime” then “Impersonation”. Upload your evidence pack. Note the acknowledgement number. - If the fake profile has already been used to ask anyone for money, OTP, or intimate photos, dial 1930 immediately and read your acknowledgement number. The 1930 desk can freeze suspect bank or UPI accounts within hours if you act fast. - Email the platform Grievance Officer using the sample notice below. Under IT (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, Rule 3(2)(b), the platform must take down impersonation content within 24 hours of receipt.

Build one folder on your laptop named with today's date and the fake handle. Put these items inside.

* Full-page screenshot of the fake profile, captured on phone and on laptop, showing username, display name, photo, bio, and follower or friend count. * Plain text file with the exact profile URL, numeric user ID where visible, account creation date if shown, and the date and time you discovered the fake. * Screenshots of at least three posts or stories or status updates from the fake account, with timestamps visible. * Screenshots of any direct messages the impostor sent to your contacts. Get these from the contacts on a separate channel and keep their phone numbers in a separate sheet. * Your own real profile screenshot and URL, for comparison. * One government photo ID scan (Aadhaar with number masked, or PAN, or passport, or driving licence). * The 1930 call log entry if you called the helpline, and the cybercrime.gov.in acknowledgement PDF. * If any contact actually paid money to the impostor, the UPI transaction screenshot, beneficiary VPA or account number, and amount. * Email thread with the platform Grievance Officer, including the original notice, any automated reply, and the takedown confirmation.

Save this folder. Do not delete anything for at least three years. The same evidence supports civil defamation, criminal proceedings, and platform appeals if the takedown is reversed.

Step 1: National Cyber Crime Reporting Portal

Go to https://cybercrime.gov.in and choose “File a Complaint”. Pick “Report Other Cybercrime” if no money has been lost yet. Pick “Report and Track” inside “Women and Child Related Crime” if the fake profile is sharing morphed or intimate content. Pick “Report and Track Financial Fraud” if any contact has already paid the impostor.

Fill these fields. Incident date and time, suspected platform, suspect profile URL, your own profile URL, a clean 200 to 500 word narrative in plain English, and the evidence files. The portal accepts JPG, PNG and PDF up to 5 MB each.

Submit and save the acknowledgement number. The portal sends this to your mobile and email. Keep the PDF.

Step 2: 1930 helpline if money is involved

Dial 1930 from any phone in India. Read the acknowledgement number to the operator. They will create a freeze request on the suspect UPI handle or bank account. Speed matters. Most banks honour 1930 freezes within 30 minutes if the funds are still in the suspect account.

Step 3: Written notice to platform Grievance Officer

Send the sample notice below to the Grievance Officer email listed on the platform's India Grievance page. Cc [email protected]. The 24-hour clock under Rule 3(2)(b) of IT Rules 2021 starts the moment your email lands.

Step 4: Grievance Appellate Committee if the platform refuses

If the platform refuses takedown or does not reply within 24 hours for impersonation, or 72 hours for any other content, file an appeal at https://gac.gov.in within 30 days. The Grievance Appellate Committee under Ministry of Electronics and Information Technology can order takedown and is binding on the platform.

Step 5: Sahyog portal for intermediary cooperation

For high-impact cases (public figure impersonation, mass-scale fraud, sextortion rings), state cyber units can route a Sahyog notice via https://sahyog.mha.gov.in to compel platform cooperation under Section 79(3)(b) of the IT Act. Citizens cannot file Sahyog notices directly but can ask the investigating officer to do so.

Step 6: Local cyber cell FIR

Walk in to your nearest Cyber Cell with a printout of the cybercrime.gov.in acknowledgement, the evidence folder on a pen drive, and your ID. Ask for an FIR under the sections listed below. Under Bharatiya Nagarik Suraksha Sanhita 2023 Section 173, the officer must register the FIR for cognizable offences. If they refuse, write to the Superintendent of Police under BNSS Section 173(4).

You can usually stop at platform reporting plus a cybercrime.gov.in entry if all three are true. The fake profile has not yet messaged any contact for money or OTP. No morphed, intimate or doctored content is involved. No threat of violence, doxxing, or extortion has been made.

You must involve police, by FIR at the cyber cell, if any of the following is true.

* The impostor has demanded money, OTP, gift cards, crypto, or any payment from anyone in your name. * Anyone has actually paid the impostor. * The fake profile shares morphed, obscene, or intimate images, including AI-generated deepfakes. * The impostor has threatened you, your family, or anyone else with violence, exposure, or harm. * The fake profile is being used for matrimonial fraud, fake job offers, fake investment groups, or fake fundraisers. * The fake profile impersonates you in a regulated profession (doctor, lawyer, chartered accountant, government officer) and offers services. * The fake account targets a minor or shares content sexualising a minor.

In any of these cases, the offence is cognizable and the cyber cell can arrest without a warrant. Do not wait for the platform takedown before filing the FIR. Run both tracks in parallel.

When you write to a platform, a Grievance Officer, or a cyber cell, the right legal citations move your file to the front of the queue. Use only the ones that actually apply.

Bharatiya Nyaya Sanhita 2023 (BNS), in force since 1 July 2024

* Section 318 (cheating) and especially 318(4) (cheating by personation). Punishment up to 7 years and fine. This is the core charge when a fake profile pretends to be you and induces anyone to part with money, property, or sensitive information. * Section 336 (forgery) when the impostor fabricates documents, screenshots, or visiting cards in your name. Sub-sections cover forgery for cheating (336(2)) and forgery for harming reputation (336(3)). * Section 351 (criminal intimidation) if the fake account threatens violence, exposure, or harm. * Section 356 (defamation) if the fake account publishes content that lowers your reputation. Punishment up to 2 years.

Information Technology Act 2000, still in force for cyber offences

* Section 66C (identity theft) for fraudulent use of any unique identification feature, including your photo, name, or signature. Punishment up to 3 years and fine up to one lakh rupees. * Section 66D (cheating by personation by using computer resource). This is the most directly applicable section for a fake online profile that defrauds anyone. Punishment up to 3 years and fine up to one lakh rupees. * Section 66E (privacy violation) if the fake profile captures, publishes, or transmits any image of a private area of any person without consent. * Section 67 and 67A for obscene or sexually explicit content. Section 67B if a minor is involved.

IT (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021

* Rule 3(1)(b) lists impersonation as content the user must not host. Rule 3(2)(b) gives the Grievance Officer a 24-hour window to remove or disable access for content “in the nature of impersonation in an electronic form”. * Rule 3(2)(a) requires the platform to acknowledge the grievance within 24 hours and dispose it within 15 days, except for impersonation which is the 24-hour bucket. * Rule 7A establishes the Grievance Appellate Committee at gac.gov.in for appeals.

Copyright Act 1957

If the fake profile uses your photographs without permission, you, as the author of those photos, hold the copyright. Send a takedown notice under Section 51 (infringement) and Section 55 (civil remedies). The platform must remove infringing content under Section 79(3)(b) of the IT Act read with Rule 3(2)(b) of IT Rules 2021. The impostor cannot claim fair use under Section 52 because impersonation is not a permitted purpose.

Advertising Standards Council of India (ASCI)

If the fake profile endorses products or services in your name, file a complaint at https://ascionline.in. The ASCI Influencer Vetting Guidelines treat impersonation in endorsements as material misrepresentation. ASCI cannot order takedown but its order strengthens your case before MeitY and any consumer forum.

The takedown can take 24 hours on a good day and 72 hours on a bad one. In the meantime, protect your reputation in three layers.

Layer 1: Your own audience. Pin a story or status on your real account. Repeat it twice in the first 24 hours. Use the same wording every time so people recognise it.

Layer 2: Family WhatsApp groups. Forward a one-line message: “Fake profile using my photos is doing the rounds. Please ignore and do not pay anything.” Family groups are where impostor messages travel fastest, so they are also where the warning travels fastest.

Layer 3: Search and verification. Many people will Google your name after a suspicious message. Update your LinkedIn headline and your personal website (if any) with a one-line note that says: “If anyone receives a money request in my name on any social platform, it is fraud. Please report to cybercrime.gov.in.” A Google result with this note converts a worried contact into a confident reporter.

Do not engage with the impostor. Do not reply to their messages. Do not threaten them. Every interaction can be screenshotted, edited, and used against you, and it dilutes the impersonation evidence by suggesting two-way contact.

Instagram. Use the impersonation form at https://help.instagram.com/contact/636276399721841. Submit a clear photo of your government ID and your real handle. Instagram restores takedown within 48 hours for impersonation in most Indian cases.

Facebook. Use https://www.facebook.com/help/contact/295309487309948. If the fake profile is locked or private, you can still report by URL.

LinkedIn. Email [email protected] from the email tied to your real LinkedIn account. Mention “Impersonation” in the subject. LinkedIn's trust and safety team is among the fastest because impersonation hurts the platform's recruiter trust signal.

X (Twitter). Use https://help.x.com/en/forms/authenticity/impersonation. X requires a photo of your ID held next to your face for verified accounts; for unverified accounts, a clear ID scan is enough.

WhatsApp Business impersonation. Email [email protected] with the impostor's business number, your real number, and screenshots. WhatsApp Business listings can be suspended within hours when the brand owner reports them.

WhatsApp personal account hijack. If your own number has been taken over and the impostor is using your name with your contacts, send “Lost or stolen, please disable my account” to [email protected] from any email. WhatsApp will deactivate the SIM-linked account within 30 days, but your contacts can be warned by you the same hour.

Telegram. Forward the fake channel or user link to @notoscam. For impersonation of a brand or public person, also use the in-app “Report impersonation” flow.

Dating apps. Tinder, Bumble, Hinge, Shaadi, Matrimony and others all have “Report fake profile” buttons. Follow up with an email to their support address including the fake profile URL and a photo of your ID. These platforms remove impostor accounts faster than general-purpose social networks because their business depends on profile authenticity.

Job and freelance platforms. Naukri, Indeed, Upwork and Fiverr each have a “Report impersonation” flow. Mention your real profile URL and your registered email.

* Messaging the impostor. It is tempting. It is also the single fastest way to lose the case. Every reply you send becomes part of the chat that the impostor can edit and screenshot. * Deleting your old posts. People delete photos thinking it stops the impersonation. It does not. The impostor already has them. Deletion only weakens your copyright claim because the originals on your account are your strongest authorship evidence. * Filing only on one platform. Most impostors run parallel fake profiles on three to five platforms with the same photos. Run an image reverse-search on Google Lens and Yandex with your own profile photo, and look for matches on each major platform. * Skipping the cybercrime.gov.in acknowledgement. The platforms move faster when your notice cites a real NCRP reference number. A complaint without that number reads like a private dispute. * Writing a vague narrative. Two hundred specific words beat two thousand emotional words. Stick to dates, URLs, exact messages, and amounts. * Waiting for the platform. File the platform report, the cybercrime.gov.in complaint, and (if money is involved) the 1930 call in the same thirty-minute window. Each speeds up the others. * Not preserving the evidence folder. A reversed takedown, an appeal, or a defamation suit two years later all rely on the same folder. Back it up to two locations.

For pure impersonation with no money, no threats and no obscene content, an NCRP complaint plus a written notice to the platform is usually enough. File an FIR if any of the following happen: anyone is approached for money, OTP, gift cards or crypto in your name; the impostor threatens you, your family, or any contact; intimate or morphed images appear; or the impersonation continues after platform takedown. FIRs are free and the law (BNSS Section 173) requires the officer to register one for cognizable offences.

No. Mask the number with paper or a black box and leave only the photo and name visible. Most platforms accept a masked Aadhaar, PAN, passport, voter ID, or driving licence. The Unique Identification Authority of India (UIDAI) advises citizens to mask the Aadhaar number whenever the full number is not strictly required. The platform only needs to verify your face matches your real profile photo.

You can still file at cybercrime.gov.in. The platform is responsible under IT Rules 2021 regardless of where the impostor is based, because the platform “makes available” the content to Indian users. Police can also invoke mutual legal assistance treaties. In practical terms, the takedown still works because it is enforced against the platform, not the impostor.

Yes. You do not need an account to report impersonation. Use the platform's external reporting forms (e.g., Instagram's impersonation form at https://help.instagram.com/contact/636276399721841). File a Cybercrime Portal complaint and an FIR regardless of whether you have an account.

It depends on the strength of the evidence. With clear IP logs and payment trails, tracing can move quickly; complex cases involving VPNs or overseas servers take longer. The investigating officer works within the timelines and procedures laid down by the BNSS.

No. Platforms share technical data with the police or a court under lawful process (such as IT Act Section 69 or a court order), not directly with you. The police use this data to trace the suspect.

You may have a civil remedy if a platform fails to act on a valid grievance as required by the IT Rules 2021. Speak to a lawyer about a claim for damages for negligence and the harm caused; the strength of such a claim depends on the facts and the platform's compliance record.

File an FIR and a Cybercrime Portal complaint in India. Indian agencies coordinate with Interpol and CERT-In for cross-border cases, and intermediaries are required to comply with lawful Indian process. Tracing and action on overseas suspects can take longer.

Yes, fraudsters often create multiple profiles. Report each new profile immediately, reference your earlier complaints and FIR, and ask the platform to act against repeat impersonation. Monitor periodically.

No. Both are citizen-direct processes. A cybercrime lawyer helps if the police refuse an FIR or the investigation stalls, and can file a private complaint or a writ petition and represent you in court.

Yes. A criminal court can order compensation to be paid to a victim out of fines recovered (BNSS Section 395), and every State Government must run a victim compensation scheme in co-ordination with the Central Government (BNSS Section 396). You may also file a separate civil defamation suit claiming damages.

• RTI Drafter (AI Assistant) — https://righttoinformation.wiki/tools/rti-assistant (draft an RTI application to the Police Station for investigation status)
• PIO Reply Checker — https://righttoinformation.wiki/tools/pio-reply-checker (check whether a police response to your RTI is legally compliant)
• Citizen Crisis Response Network — https://righttoinformation.wiki/citizen-crisis-response-network (hub for emergency legal + statutory response guides)
• RTI Act 2005 Complete Guide — https://righttoinformation.wiki/rti-act-2005-complete-guide (understand transparency rights to track a cybercrime investigation)
• The RTI Playbook