By Jackson Godwin. Cybersecurity Analyst & Penetration Tester.
I Reported the Fake Account Immediately
As soon as I confirmed the profile wasn’t mine, I reported it to Facebook.
Then I asked my friends and family to do the same.
The more people who reported the fake account, the greater the chance it would be reviewed and removed.
But while waiting for Facebook to act, I knew I had another problem.
The scammer was still messaging people using my identity.
The Fake Conversations Looked Convincing
Several friends forwarded screenshots of their conversations with the fake account.
The messages started naturally.
The scammer would ask:
“How have you been?”
“It’s been a long time.”
“Hope you’re doing well.”
Nothing looked suspicious.
Only after several friendly messages did they introduce an emergency or financial request.
That gradual approach made the scam far more believable.
They Knew Exactly Who to Target
The fake account wasn’t sending random messages.
It was contacting people who already knew me.
Family members.
Former classmates.
Work colleagues.
Old friends.
The scammer understood something important.
People are naturally less suspicious when a request appears to come from someone they already trust.
One Friend Asked the Right Question
Fortunately, one of my friends did something very simple.
Instead of replying only through Facebook Messenger, he called my phone.
He asked:
“Are you really asking me for money?”
That one phone call exposed the scam immediately.
The fake account couldn’t answer because it wasn’t me.
A thirty-second conversation prevented what could have become a costly mistake.
The Criminal Never Needed My Password
One thing surprised many people.
My Facebook account had not been hacked.
The scammer never logged into it.
They simply copied information that was already visible on my public profile, including:
My profile picture.
My name.
My cover photo.
Some public posts.
Everything else was built from those publicly available details.
This is what makes profile cloning different from account hacking.
The attacker creates a new fake account instead of taking over your real one.
Public Information Can Be Powerful
Before this incident, I never thought much about my public profile.
Afterwards, I realised how much information anyone could see.
Even a few public photographs and basic profile details were enough to create a convincing impersonation.
That doesn’t mean you should never share anything online.
It simply means it’s worth reviewing your privacy settings and deciding what should be public.
The Scam Was About Trust
The criminal didn’t rely on sophisticated malware.
They didn’t exploit a software vulnerability.
They exploited relationships.
Their plan depended on one simple idea:
If people trust Jackson, they’ll trust a message that appears to come from Jackson.
That made the attack surprisingly effective.
My Friends Became My First Line of Defence
The quickest way to slow the scam wasn’t technology.
It was communication.
By warning friends and relatives quickly, many of them recognised the fake account before responding.
That experience reminded me that cybersecurity isn’t always about software.
Sometimes it’s about people looking out for one another.
In the final part of this article, I’ll explain the biggest warning signs of Facebook profile cloning scams, share practical ways to protect your identity, and reveal the simple habit that can stop most impersonation scams before they succeed.
Continue Reading:Someone Cloned My Facebook Profile (Part 3)
