In November 2022, a Twitter account carrying Eli Lilly's name, logo and a paid verification badge posted that insulin was now free. The tweet stayed live for hours. The next day, Eli Lilly's shares fell around 4–6%, erasing an estimated $15 billion in market value, and the company suspended its Twitter advertising. Novo Nordisk and Sanofi slipped too, on reputational contagion alone.
Markets move on many things, so the fall cannot be pinned to the single post. But the pattern is the point: one fraudulent account, mistaken for genuine, can move a listed company's valuation within hours. The scale problem behind it is growing, reported US losses to scams originating on social media reached $2.1 billion in 2025, eight times the 2020 figure, making social media the costliest contact method scammers us
Why this is on the agenda now
Brand impersonation on social media sits across security, legal and marketing agendas at once, because one fake account touches all three: a fraud vector that borrows customer trust, an intellectual property and reputation exposure, and a discoverability problem when customers cannot find the real account first.
The pace has changed too. Fake accounts are cheap and fast to create, and generative AI is making the copy, imagery and even video behind them harder to distinguish from the real thing. Deepfake tools can now reproduce an executive's voice or likeness convincingly enough to support a fabricated endorsement, at a volume no manual review process was built to handle.
The consequences are direct: fraud and charge-backs where customers are misled into fake transactions, and slower-burning trust erosion where they cannot tell official accounts from impersonators. Convincing fake executive or employee accounts are also a social engineering entry point, used to solicit credentials or authorise fraudulent payments, extending brand impersonation into a wider security exposure.
Rituals cosmetics took to Instagram to report that fraudulent accounts were impersonating the brand and its employees to discuss collaborations. When fake collaboration requests circulate, genuine partnership outreach becomes harder. Creators learn to treat brand DMs as suspicious, which slows legitimate influencer and affiliate activity. That effect sharpens around launches, when attention attracts imitators.
What is social media impersonation?
Social media impersonation is the unauthorised use of a brand's name, logo, imagery or executive identity to create an account that appears official. It is distinct from broader phishing or reputational criticism, because it specifically exploits the signals customers use to recognise a brand — name, handle, logo, image and verification status.
Not every unofficial account is impersonation. Fan accounts, regional resellers and legacy or dormant profiles created before a rebrand can all look unofficial without being fraudulent. Governance starts with classification: knowing what exists, who controls it, and which accounts genuinely misrepresent the brand.
Common forms include:
Brand account cloning — a fake profile replicating an official page's name, logo and bio.
Executive and employee impersonation — attackers posing as leadership or staff to exploit internal trust, often as a precursor to social engineering.
Customer support scams — fake "support" accounts that reply to genuine complaints before the real brand does, harvesting details or pushing fraudulent refund links.
Influencer and partner impersonation — misuse of a genuine partnership to lend a scam false credibility, as was the case with Rituals.
How to detect it at scale
Manual monitoring does not scale against the volume and speed involved. A single brand can face fake accounts across multiple platforms and regions at once, and a human review queue checking mentions and handles individually will always trail the next one created.
Detection at scale means continuous monitoring for brand mentions, near-identical usernames, logo and image reuse, and copied bio content, rather than periodic manual sweeps. High-risk signals include handles one character from the genuine account, cloned profile imagery, recently created accounts with disproportionate follower activity, and content mirroring official posts. Automated monitoring helps flag these patterns as they emerge, rather than after a fake account has already gathered engagement.
Enforcement and takedown: the practical friction
Identifying a fake account is only the first step. Removing it means working through each platform's own reporting process, each with different evidence requirements, review timelines and escalation routes.
Two problems recur. Speed versus scale: platform review queues were not built for enterprise-volume reporting, so response times can lag well behind the pace at which new impersonating accounts appear. Cross-platform coordination: a brand rarely faces impersonation on one network alone, and tracking cases separately across each platform makes it harder to see the true scale of exposure or spot repeat offenders reappearing under new handles.
A structured evidence pack clear proof of ownership, the infringing content and the policy it breaches — creates a clearer route to remediation, though platform policy, evidence quality and ownership context still determine the outcome. There are no guaranteed takedowns; there is a stronger or weaker case.
Preventing brand impersonation on social media before it starts
Detection and enforcement matter, but the stronger position is reducing exposure in the first place.
Secure and verify official accounts. A consistent verified account map makes the genuine brand easier for customers to recognise, and easier for a brand team to police.
Proactively register handles. Securing consistent naming conventions across platforms, including likely variants, closes off some of the easiest impersonation routes before they are used.
Educate customers and employees. Awareness of what an official account looks like, and how to report a suspicious one, extends detection beyond the brand team itself.
Use a dedicated protection layer. Purpose-built monitoring and remediation technology gives brand and security teams the account registry, evidence pack and takedown workflow that ad hoc processes cannot sustain at enterprise scale.
How we can help
Handles gives brand, security and legal teams a control layer for this problem: a source of truth for official accounts, continuous risk monitoring, and a structured route to remediation.
We work with adidas to strengthen its digital brand protection. In the first year alone, we removed over 50,000 social accounts that were not authorised by the brand. By partnering with us, they took a proactive approach to securing its social media presence, ensuring a safer, more authentic experience for its consumers.
Radar provides automated monitoring for impersonating accounts and infringing brand variants across platforms. Trust Index audits a brand's existing social footprint to build the verified account map governance depends on. IP Integrity helps build and submit the evidence packs platform takedown processes require, and Handle Acquisition supports securing high-value or contested usernames through a managed brokerage route where reclaiming a handle, rather than reporting a fake, is the right path.
None of this guarantees a takedown or removes every impersonator; platform policy and evidence still decide the outcome. What it does is replace fragmented, manual monitoring with a repeatable workflow: audit, classify, evidence, remediate, track, the same habits that separate enterprise teams handling this well: a documented workflow, triage that prioritises the highest-risk cases, ongoing tracking of repeat offenders, and integration into the wider fraud and security programme rather than treating it as a standalone marketing issue.
Brand impersonation on social media is a growing, cross-functional risk, not a one-off incident to react to. The scale of fake accounts, the speed generative AI now adds, and the direct line from a single convincing post to fraud or a market reaction make it a standing item for security, legal and brand teams alike. Proactive registration, continuous monitoring and a structured remediation workflow, backed by the right technology, put a brand back in control of its own social identity.
Speak to the team about mapping your social estate.
FAQs
What is social media impersonation?
The unauthorised use of a brand's name, logo or executive identity to create a social media account that appears official, aimed at misleading customers, employees or partners.
How common are fake accounts on social media?
Brand-level figures vary by platform, but the financial harm is rising fast: US reported losses to social-media-originated scams reached $2.1 billion in 2025, an eightfold increase since 2020 (FTC, 2026).
How can I detect fake accounts on social media?
Continuous, automated monitoring for brand mentions, near-identical handles, cloned logos and copied content, with triage focused on the highest-risk signals such as active scam activity or executive impersonation.
What is brand impersonation protection?
Technology and services combining monitoring, evidence-building and takedown workflow to help identify impersonating accounts and pursue their removal through the relevant platform process.
How do I report impersonation on social media?
Each platform has its own reporting route, typically requiring proof of brand ownership and the infringing content or URL. Requirements and response times vary, which is why enterprises handling multiple cases usually formalise this into a repeatable, evidenced workflow.
