Reporting a fake Facebook account in Australia step by step

Last summer, Sydneysider Megan R. noticed her own headshot sitting on a profile she had never created. The name was slightly misspelled, the friendship list looked thin, and within a week her real contacts were receiving friend requests from the imposter. Stories like Megan's have become routine across Melbourne, Brisbane, and the smaller coastal towns of the Sunshine Coast, where scammers clone real profiles to lend credibility to romance cons, marketplace frauds, and dodgy cryptocurrency pitches. Learn more about Can You Really.

A cloned Facebook page can do more than clutter a timeline. Criminals use stolen identities to message victims in your name, harvest contact details, run fake ticket sales ahead of the AFL Grand Final, or push phishing links disguised as Centrelink updates. The reputational damage can follow you into job interviews, real estate applications, and small business dealings. Australia has caught up with the scale of the problem, with the eSafety Commissioner able to compel platforms to remove seriously harmful content within tight statutory deadlines.

Knowing how to report a fake Facebook account properly saves time and helps Meta's moderators act faster. This walkthrough covers the warning signs worth catching early, the evidence to gather, the reporting tools built into Facebook, and the local regulators you can escalate to when a profile refuses to disappear. Along the way there are practical habits that make your own account a harder target next time around.

Spotting the signs of a fake Facebook profile

Most impersonators follow a recognisable pattern. They grab a profile picture from a public Instagram or LinkedIn account, copy a handful of posts, then blast friend invitations to the victim's contacts. The new account usually has a thin Friends list, very few photos, and almost no tagged posts. If the page lists a workplace that does not match the name, or the location says Sydney but the posts complain about Melbourne weather, that is a strong indicator.

Genuine accounts tend to have a history stretching back several years, full of comments from real friends, whereas impersonators often create the page a few days before sending messages, which shows up in the "Joined" section. Watch out for profiles that send friend requests to dozens of people with no obvious connection, or that pivot immediately to Messenger chats about investments, package deliveries, or stranded relatives. Phrases like "my account got hacked, please add the new one" or links to suspicious giveaways are the calling cards of phishing networks. Anyone who spots a profile mimicking their own should resist the urge to engage, since replies can tip the scammer off that the real person is watching.

Collecting evidence before you report

Facebook's review team processes a huge volume of reports every day, and a well-documented submission moves to the front of the queue. Before you file anything, take screenshots on both desktop and mobile, since URLs sometimes render differently across devices. Record the impostor's full profile URL, the date the fake account was created if visible, and a few sample messages that show how the profile is being used to mislead people.

Make a note of the real-world damage when you can quantify it. If a colleague in Adelaide wired money to a scammer using your name, keep the bank reference. If a friend was tricked into buying event tickets that never existed, ask them to save the conversation. These details matter when you escalate the matter beyond Facebook, particularly to the eSafety Commissioner or the ACCC's Scamwatch service, which tracks patterns of impersonation fraud at a national level.

Try not to interact with the imposter beyond the minimum needed to record their behaviour. Posting warnings publicly can warn friends, but it also gives the scammer time to delete posts and pivot to a new fake account. A calm, structured evidence file is far more useful than a public naming and shaming, especially if the matter ends up at the NSW Civil and Administrative Tribunal.

Using Facebook's built-in reporting tools

The fastest way to remove a fraudulent profile is through Facebook's own reporting flow. On a desktop browser, open the impostor's profile, click the three dots underneath the cover photo, and choose "Report profile." Select "Pretending to be someone" from the menu, then choose whether the impersonator is pretending to be you or someone you know. Facebook will ask you to identify the real person, which is where your evidence file becomes useful.

On the mobile app the path is similar but easier to miss. Tap the three dots on the cover photo, choose "Report profile," and follow the prompts to flag fake account behaviour. If the impersonator is messaging your contacts directly, you can also report individual conversations from within Messenger by long-pressing a chat, then selecting "Something's wrong" and choosing the impersonation category.

Most genuine reports are reviewed within 24 to 48 hours, but a takedown is not guaranteed. Facebook may conclude that the profile is satirical, a fan page, or a public figure's legitimate alter ego, in which case the report is closed without action. When that happens, escalate the matter through how reporting actually works to see when further steps make sense, especially if the account is actively scamming Australians.

Reporting to Australian authorities and regulators

When Facebook's internal process stalls, several Australian agencies can pick up the case. Scamwatch, run by the ACCC, accepts reports of impersonation fraud even when no money has changed hands, and the data helps map patterns nationally. Reports made by West Australians, Tasmanians, and Queenslanders feed into the same database, which means your experience may help block the next attempt.

If the fake account has been used to defraud someone, the matter should also be lodged with Report Cyber, the Australian Cyber Security Centre's online portal. ACSC analysts can coordinate with banks, telcos such as Telstra or Optus, and platform trust and safety teams to disrupt the scam. Local police can take a statement too, particularly if the impersonation has been used to apply for credit in your name.

The Office of the Australian Information Commissioner can also be relevant when a fake account involves personal information collected without consent, especially if it came from a previous data breach. Employer IT teams in mining or transport often liaise with Meta's Singapore trust and safety contacts to speed up removals.

When to escalate through the eSafety Commissioner

Australia's eSafety Commissioner has powers that go further than most people realise. The office can issue removal notices to social media platforms under the Online Safety Act, with statutory deadlines for compliance. The scheme applies to serious adult cyber abuse, online harassment, and non-consensual sharing of intimate images, and impersonation often overlaps with these categories when a fake account is used to menace a specific person.

Anyone in Darwin, Hobart, or Melbourne's western suburbs can lodge a complaint through the eSafety website with a timeline, evidence file, and the URL of the offending account. The Commissioner also coordinates with platforms on behalf of young people, which matters for parents in regional communities with limited local support services. Pairing an eSafety complaint with a Report Cyber submission creates a stronger paper trail than either route alone.

Practical habits to reduce the risk

A few small adjustments to daily routines make your profile a much harder target. The following checklist covers the changes that deliver the biggest payoff for the least effort.

• Audit your privacy settings so only friends can see your photos, friend list, and check-ins from places like Bondi Beach or the MCG.
• Watermark new profile pictures or use a less obvious portrait so they are harder to lift by impersonators.
• Reverse image search your own headshot every few months to catch silent clones before friends do.
• Use a unique email address for social logins and switch on two-factor authentication through an authenticator app rather than SMS.
• Be wary of accepting friend requests from people already in your network, since genuine duplicates rarely happen by accident.
• Tell close relatives, especially older ones on the Central Coast or in rural Tasmania, how to verify a sudden new profile claiming to be you.

Helping friends and family spot impersonators

Once you have gone through the reporting process, the next step is helping the people around you recognise the warning signs. A quick group chat explaining how impersonation scams usually unfold can save someone from being convinced to wire money to a "relative" stuck overseas. Share the tell-tale signs: unfamiliar writing style, urgency around money, or requests to switch to WhatsApp or Telegram.

Encourage older relatives to verify unusual requests by calling you on a known number, not by replying to the message thread. Scammers rely on the panic of the moment, especially when they claim a grandchild needs help from a hospital in Ballarat or a hostel in Cairns. A short phone call breaks the spell.

For small business owners running a local cafe in Fitzroy or a tradie service in Geelong, a fake Facebook page can be just as damaging as personal impersonation. Set up alerts for your business name using Google Alerts, register your brand as a trademark through IP Australia, and claim your official page early so impostors have nowhere to hide.

Reporting a fake Facebook account in Australia is rarely a single click. It combines careful documentation, the platform's own tools, and a clear escalation path through Scamwatch, Report Cyber, and the eSafety Commissioner. The investment of an afternoon can spare you months of cleanup and protect your contact list from being pulled into a scam.

Take ten minutes today to lock down your privacy settings, switch on two-factor authentication, and let two trusted friends know how to spot a clone of your profile. The best defence against impersonation is a community that recognises the pattern early, so share what you have learned with the group chats that matter most.