A friend messages to say a second “you” just sent them a friend request and started asking for money. You did not make a new account — someone copied yours. Cloned social media accounts are a fast, low-effort scam that turns your name and photos against the people who trust you. Our GetMyPassword team explains how to recognize a cloned account and shut it down.
How account cloning works
Cloning does not require hacking. A scammer simply copies your public profile photo and name, creates a brand-new account that looks like yours, and sends requests to your friends. Once a few accept, the impostor messages them as “you” — asking to borrow money, pushing a fake investment, or sharing a malicious link. Because the request seems to come from someone they know, people drop their guard. Your real account is untouched; your identity is the thing being stolen.
Signs of a cloned account
- A duplicate profile with your photo and name but a new, near-empty account.
- Friends report a second request from “you” when you sent none.
- Few posts or friends and a very recent creation date.
- Messages asking for money, a code, or a click — often urgent and a little off in tone.
What to do if you are cloned
Move quickly to limit the damage. Report the fake account to the platform for impersonation, and ask friends to report it too — multiple reports speed up removal. Warn your contacts with a post so no one falls for the impostor. Then check that your real account is still secure: confirm your password is unique, two-factor authentication is on, and no one has accessed it. Tightening your privacy so strangers cannot grab your photos and friend list makes you a harder target next time.
A cloned account does not break into your profile — it copies your face to fool your friends. The fix is fast: report it, warn your circle, and tighten what strangers can see.
How to make yourself harder to clone
You cannot stop someone from copying a public photo, but you can shrink the opportunity. Limit who can see your friend list and posts, so a cloner cannot easily find your contacts to target. Be cautious accepting requests from people you are “already friends with.” And keep your genuine account locked down — a unique password from our password generator and two-factor authentication — so a clone is the worst they can manage, never a real takeover.
Frequently asked questions
What is a cloned social media account?
It is a fake account that copies your public name and photo to impersonate you, without hacking your real profile. The impostor friends your contacts and messages them as you to ask for money, codes or clicks.
What should I do if my account is cloned?
Report the fake account for impersonation and ask friends to report it too, warn your contacts with a post, and confirm your real account is secure with a unique password and two-factor authentication.
How do I make it harder to be cloned?
Limit who can see your friend list and posts so a cloner cannot find your contacts, be cautious with requests from people you seem to already know, and keep your real account locked down with a unique password and two-factor authentication.