← All posts

Someone is using your photos to catfish people

A stranger messages you out of nowhere. Sometimes they are confused, sometimes they are furious, and sometimes they are heartbroken. They say they have been talking to you for months on a dating app, or on Instagram, or over WhatsApp. They may have sent money. They have your face, your gym selfies, your holiday pictures, and a name you have never used.

It is a disorienting thing to find out, partly because you are being blamed for something you had no part in, and partly because there is nothing about it that you agreed to. If someone is using your photos to catfish people, you did not cause it and you are not liable for what the person behind the account did. What you can do is narrow the space they are operating in, and give the people they contacted something solid to hold onto.

Why your photos, and why you may never fully stop it

Romance fraud runs on borrowed faces. The people running these accounts need a photo library that looks like a real, ordinary life, because a single glamorous headshot does not survive a video call request or a “send me a picture of you right now.” So they harvest whole sets of images from public profiles: someone with a few hundred photos across ten years is far more useful to them than a stock model. Military personnel, doctors, engineers, and small-business owners get targeted especially often, because those professions carry built-in credibility and a plausible reason to be far away and hard to reach.

Being honest with you about the ceiling here matters. Once your photos are in circulation they may be resold, re-uploaded, and reused by different operators for years. You can get individual accounts removed, and that is worth doing every time. What you cannot do is pull the images back out of circulation entirely. The goal is not perfect erasure, it is making your face expensive to use and easy to check.

Find out how far it has spread

Before you report anything, get a picture of the scale. Run a handful of your most-used photos through more than one reverse image search, since they index different corners of the web. Google Images and Bing Visual Search both accept an uploaded file, and specialist tools like PimEyes and TinEye will often surface results the big engines miss. Search your own name alongside terms like “scam,” “fake profile,” or “dating” too, because victims sometimes post warnings on forums with the name the account was using.

Write down every account you find: the platform, the display name, the profile URL or handle, and the date you saw it. Screenshot each one before you report it, because reported profiles vanish and the screenshot is the only version you will still have afterward. Our guide on preserving evidence in the first 24 hours covers how to capture this in a way that holds up later if you ever need it to.

Report the accounts, and use the right lever

Every major platform has an impersonation report, and this is the one to use rather than a generic “spam” flag. On most services you can report a profile that is pretending to be you even if you do not have an account there yourself, using a web form and a photo of your ID. Dating apps in particular tend to act quickly on these, because a stolen-photo account is a direct liability for them.

There is a second lever most people do not know about. If you took the photo, you own the copyright in it, and a copyright takedown notice is often processed faster and more reliably than an impersonation report, because platforms have a legal obligation attached to it. Selfies are your own work by definition. If the photo was taken by a friend or a photographer, they hold the copyright, not you, so the notice has to come from them.

If the fake account is also being used to harass or threaten people, or if it is impersonating you by name rather than only using your images, our post on what to do when someone is impersonating you on social media goes deeper into the reporting routes and account lockdown steps.

What to say to the people who were fooled

Some of the strangers who reach out will be angry at you. It helps to remember that they have just learned the person they trusted does not exist, and your face is the only real thing they have to direct that at. A short, calm reply does more good than a long defence: confirm the account is not you, tell them you are reporting it, and point them somewhere useful. If they sent money, they need to act quickly, and our guide on what to do if you sent money to a romance scammer is the fastest thing you can hand them.

Do not try to investigate the operator yourself, and do not confront them. Engaging tends to get your photos moved to accounts you have not found yet, and it puts you on the radar of someone who already knows a great deal about you. If you want to understand what tracing the person behind the account actually involves, we wrote about how a scammer’s identity is established and where the real limits are.

Reduce the supply, then stop checking daily

Tighten what is publicly reachable going forward. Set old photo albums to friends-only rather than deleting them, since deletion does not touch copies already taken. Turn off public tagging where you can, and check whether your photos are exposed through an account you forgot about, an old profile, a club roster, or a work bio page. Reporting to the FTC at ReportFraud.ftc.gov and to IC3.gov puts your name on record as a misused identity, which is genuinely useful if a victim later reports the same account and investigators need to connect the two.

Then, deliberately, set this down. Plenty of people fall into checking reverse image search every morning, and it turns someone else’s crime into a daily job. A check every few months is enough to catch a resurgence. If it does come back, you already know the routine, and you will get through it faster the second time.

— Gus