There are several ways an account can look familiar
Someone can create a new profile that copies another person's name and photo, or they can take over the real account after stealing the password. Those situations look different behind the scenes but can produce the same problem for the recipient: a message appears to come from someone they trust.
That is why checking only the display name or profile picture is not enough for important requests.
Unusual behaviour is a stronger clue than appearance
A sudden request for money, gift cards, passwords, verification codes, private photos or urgent help deserves verification even when the account looks completely normal. Changes in tone, secrecy or pressure can also be useful clues.
The safest response is to contact the person through a channel you already know, such as their usual phone number or face to face.
Do not use the suspicious account to verify itself
Asking 'is this really you?' inside the same compromised or fake account does not prove anything, because the impersonator can simply answer yes. Verification needs an independent route.
For organisations, use the official website, app or known contact details rather than a link or phone number supplied by the suspicious profile.
If someone is impersonating the child
Save the profile URL, username and screenshots, then use the platform's impersonation-reporting process. Tell friends not to engage with the fake account and ask them to report it through the platform if appropriate.
Check the child's real account for signs of compromise as well. If there are unexpected sessions, password-reset messages or profile changes, secure the real account immediately.
Reduce the information available for copying
Public profile information can make impersonation more convincing. Review what is visible to strangers and avoid publishing unnecessary personal details such as phone numbers, school information or exact routines.
Privacy cannot prevent every copied profile, but limiting unnecessary information can make impersonation harder and reduce what a fake account can use to sound believable.
A familiar profile is not proof of identity. Verify unusual requests through a separate trusted route and report copied or compromised accounts quickly.
Continue with the Cyber Safety Hub, practise the ideas in Ranger Academy, or use the free printable resources at home or in the classroom.