A fake X (Twitter) account is pretending to be you. What to do.

1. Fake account, parody or hacked account?

X allows parody, commentary and fan accounts only if they meet all four conditions: a word like "parody," "fake," "fan" or "commentary" at the start of the account name, a similar word in the bio, a profile photo that isn't identical to the person's, and the parody, commentary and fan (PCF) label turned on. An account that misses these and passes itself off as you breaks X's authenticity policy.

2. Save evidence before you report

1. Write down the exact @handle and the full URL (x.com/handle). The display name can change at any time; the URL is what matters.
2. Take dated screenshots of the profile, bio, posts and any messages sent to your contacts.
3. Copy the link to each harmful post (the post's "…" menu, then share or copy link).
4. Don't reply to the fake account or quote it publicly: that only gives it reach.

3. How to report the fake account on X

If you (or your business) are the one being impersonated

1. Use X's impersonation report form in the Help Center. X says you do not need an X account to report impersonation.
2. Say that you are the person being impersonated, give the fake account's handle, and explain briefly what is misleading (name, photo, bio, messages sent in your name).
3. If you are asked for ID, send it only through that official form, never to an account messaging you as "X Support."
4. Keep the confirmation email so you can follow up.

From the app or website (if you have an account)

Open the fake profile, tap the "…" icon, then Report, and choose the reason saying the account is pretending to be you or someone else. Friends can report it the same way as bystanders. Report each harmful post too (the post's "…" icon, then Report).

What X does: after review, an account found in violation is suspended or required to update its profile. For a mislabeled parody, the first step is often a required profile change, and repeat violations can lead to suspension. X says it acknowledges reports within 24 hours and usually resolves them within a few days, though some take up to 30 days.

If your real account was hacked: reset your password ("Forgot password"), secure your email first, revoke third-party apps you don't recognize and turn on two-factor authentication. If you still can't log in, submit X's support request with your username and the date you last had access. If anyone lost money, report it to the FBI at ic3.gov in the US, or to Report Fraud in England, Wales and Northern Ireland (Police Scotland on 101 in Scotland).

4. The fake account has a blue checkmark

On X, the blue checkmark means the account pays for X Premium and meets eligibility rules. X states that it does not mean the account has been ID verified, so an impersonator can get one.

1. Report it the same way (section 3): the checkmark doesn't protect it from an impersonation suspension.
2. Mention it in your report: X's eligibility rules exclude misleading or deceptive accounts, and changing the name, photo or handle removes the checkmark until the account is validated again.
3. Warn your audience: many people still read the checkmark as proof of identity.

5. Private photos, personal information or intimate images

1. Personal information (home address, phone number, ID documents, bank details): report the post with the private information reason, or use X's private information form. For ordinary photos or videos of you posted without permission, only you or an authorized representative (a parent or lawyer) can report.
2. Intimate images, including your face edited or AI-generated onto a nude body: report the post as a sensitive photo or video, then as unauthorized intimate content, or use the same form. X says it permanently suspends the account that originally posted it.
3. Stop it spreading elsewhere: if you were 18 or over in the images and have them, StopNCII.org creates a digital fingerprint on your device (the image never leaves it) that partner platforms use to block it.
4. In the US, the TAKE IT DOWN Act requires covered platforms to remove non-consensual intimate images, including AI-made ones, within 48 hours of a valid request; the FTC has enforced it since May 2026.
5. More help: fake nude deepfakes, leaked content: what to do and, if someone wants money, sextortion: what to do. If you are under 18, see help for under-18s.

6. If X doesn't act

1. In the EU, use X's Digital Services Act form to report illegal content. The DSA requires X to process your notice and explain its decision. Our takedown request template gives you the wording.
2. Appeal the decision through X's internal appeal; EU users can also go to a certified out-of-court dispute settlement body or a court.
3. Outside the EU, report again with the earlier reference and any new evidence, and keep a record of every answer.
4. Check other platforms: the same person often sets up accounts elsewhere. See fake Instagram account and someone using my photos.

7. What the law says

X's rules ban impersonation, sharing private information and posting intimate images without consent, so a well-made report usually works without going to court. The legal side depends on where you live. In the US, there is no single federal law against fake social media accounts, but several states, including California (Penal Code § 528.5) and Texas, have online impersonation laws, and using a fake identity to get money is fraud. In England and Wales, sharing or threatening to share an intimate image without consent is an offence (Sexual Offences Act 2003, section 66B); other fake-account cases may be harassment, fraud or a communications offence. In France, online impersonation is punishable by one year in prison and a €15,000 fine (article 226-4-1 of the Criminal Code). This page is general information, not legal advice: for your own case, talk to a lawyer or the police. More in online impersonation: what to do.