In November 2022, an account carrying Eli Lilly's name, logo and a paid verification checkmark posted that insulin was now free. By the next day, Eli Lilly's share price had fallen from around $368 to $346, erasing close to $15 billion in market value (Marketplace). No product had changed and no systems had been breached. This is brand impersonation: the unauthorised use of a company's identity to deceive customers, partners or the public, and the Eli Lilly case remains one of the clearest examples of what it can cost.
What is brand impersonation?
Brand impersonation is when a bad actor poses as a brand, executive, employee or affiliated entity to deceive customers, partners or the public. It appears across digital channels: fake social accounts and cloned profiles, fraudulent customer support accounts, spoofed websites and typo domains, and messages built to look like official communication. What makes it distinct from other forms of online abuse is identity: the deception depends on being mistaken for the real thing. It sits within the wider discipline of social media brand protection as a specific, identity-based threat.
Why should you be concerned about brand impersonation?
Brand impersonation matters because it compounds across every channel a brand operates in, not only the one where it first appears.
Scale. US reported losses from social-media scams reached $2.1 billion in 2025, eight times higher than in 2020 (FTC). Fake accounts and cloned profiles can appear across several platforms and regions at once.
Trust and revenue. Customers who engage with a fraudulent support account or fake offer tend to blame the brand, not the impersonator, which shows up as lost sales and eroded trust.
Security. Impersonation is a common entry point for phishing and social engineering, extending the risk into the organisation's own systems.
Speed. Social platforms are built for reach; a convincing fake can circulate widely before a brand team even sees it.
Common types of brand impersonation
Brand impersonation takes several recognizable forms.
Social media impersonation: fake accounts, cloned profiles and copied brand assets on the platforms where the brand operates.
Executive and employee impersonation: attackers posing as leadership or staff to exploit internal authority and trust.
Customer support impersonation: fraudulent support accounts that intercept users already looking for help, often replying directly to a brand's own posts.
Website and domain impersonation: typo-squatted domains and cloned landing pages built to capture credentials or payments
Not every unofficial account fits this pattern. Fan pages, legacy accounts and regional variants are common and not inherently fraudulent; the distinction shapes how a brand responds.
How does brand impersonation work?
Impersonation works by copying the signals people use to recognize a brand: name, logo, tone of voice, imagery and, increasingly, a verification badge. Social platforms make this effective because they are built for speed and reach, so a convincing post can spread before anyone on the brand's side reviews it. Automation and generative AI lower the effort further, letting attackers produce and test fake variants at a scale manual monitoring cannot match.
How to detect brand impersonation
Detection starts with knowing what exists: monitoring official accounts, brand mentions and key assets (logos, names, ad creative) across the platforms that matter to the business. High-risk signals include lookalike handles, copied content, unusual posting behaviour and inflated or bot-driven engagement.
Manual review does not hold up against thousands of variants across multiple platforms and languages. Technology built for continuous scanning and risk-based prioritisation turns detection into an ongoing capability, rather than something rediscovered each time a customer flags a fake account. For a step-by-step walkthrough, see our guide on conducting a social media impersonation audit.
It's also important to be aware that brand impersonation risks are highest during campaigns, as it raises the value because customers are more primed to engage.
How to prevent brand impersonation
Prevention is largely about closing gaps before they are exploited.
Secure and verify official accounts so customers have a clear, consistent way to confirm what is genuine.
Register handles and key brand assets early, including on platforms and in regions not yet active, to reduce the targets available to an impersonator.
Educate employees and customers on what official communication looks like and how to report suspected impersonation.
Use dedicated brand protection technology to maintain an account registry and monitor for new risk at a scale internal teams cannot sustain unaided.
Brand impersonation vs related threats
Brand impersonation overlaps with, but is distinct from, adjacent threats. The difference is identity: impersonation means posing as the brand itself, not merely exploiting or commenting on it.
Threat | What it involves | Key difference |
|---|---|---|
Brand impersonation | Posing as the brand, an executive or staff to deceive | Identity-based deception |
Phishing | Fake messages or sites, often citing a brand, used to harvest data | Frequently the vehicle for impersonation, not synonymous with it |
Brand abuse | Counterfeit goods, unauthorised affiliate use, trademark infringement | Broader commercial and IP misuse, not always a fraudulent identity |
Reputation issues | Negative sentiment, reviews or press coverage | About perception, not a fabricated identity |
How we can help
Handles gives enterprise teams a control layer to detect and prevent brand impersonation. Radar provides continuous monitoring of accounts, mentions and brand assets, surfacing impersonation and high-risk signals early. Audit gives teams an AI-powered audit of what is currently operating under the brand's name, distinguishing official, legacy and unofficial presence. Where enforcement is the right route, IP Claims helps build the evidence needed for a takedown request and tracks repeat offenders. Outcomes still depend on platform policy and evidence, but this creates a clearer route to remediation and a single source of truth for what is official.
Conclusion
Brand impersonation is not an occasional edge case. It is a persistent, scalable threat that touches customer trust, revenue, security and reputation at once, and the Eli Lilly case shows how quickly it can reach the boardroom. Protecting trust, revenue and brand identity means treating detection, evidence and remediation as a continuous capability, built on a clear source of truth for what is official.
FAQs
What is brand impersonation?
The unauthorised use of a company's name, logo or identity to appear as an official brand, executive or representative, usually to deceive customers, partners or the public.
What is social media impersonation?
Social media impersonation carried out through fake social media accounts, cloned profiles or copied brand assets on social platforms, where speed and reach make convincing fakes especially effective.
Why is brand impersonation dangerous?
It creates financial risk through fraud and lost sales, reputational risk through fast-spreading fake content, and operational risk when it enables phishing or social engineering.
How can I detect brand impersonation?
By monitoring official accounts, mentions and brand assets for signals such as lookalike handles and unusual engagement, using technology to do this continuously at a scale manual review cannot cover.
How do I stop brand impersonation?
By securing official accounts, registering key handles and assets early, training staff and customers to recognise fakes, and using dedicated brand protection technology to monitor and enforce at scale.
