A fake account using your name and photo can hurt your reputation, trick your followers, and even steal money from people who trust you. Impersonation has been a violation of the X Rules for years, but the platform’s rules changed a lot recently, and many old guides are now out of date. This article explains what X currently says, what is actually documented, and what steps you can take today, whether you are in Lagos, Mumbai, Jakarta, Nairobi, or anywhere else.
What counts as impersonation on X
Under X’s authenticity policy, you may not impersonate another person, group, or organization in order to deceive others. The policy also bans fake personas, which includes using stolen or AI-generated profile photos, copied bios, or misleading profile details [1]. X states that accounts posing as another person, group, or organization in a confusing or deceptive manner may be permanently suspended under its misleading and deceptive identities policy [2].
One important nuance: X does allow parody, commentary, and fan accounts, often called PCF accounts, but only if they clearly show they are not affiliated with the real person or brand [1]. We explain the exact PCF rules below, because they matter when you report.
Why impersonation is a real problem, not just an annoyance
Security researchers and fact-checkers describe several common scam patterns on X:
- Fake customer support accounts that reply to people complaining about a brand, then move the conversation to direct messages to harvest personal data or payment details [11]
- Cryptocurrency and investment scams run through accounts pretending to be executives or famous figures [11]
- Coordinated networks of fake accounts that make one impersonator look popular and trustworthy [11]
Fact-checking organizations in Africa have documented real-world harm. One investigation found parody accounts of a former Nigerian head of state that misled users for years, more than 20 fake accounts targeting a single Nigerian activist, and seven impersonators of one comedian. During the 2020 #EndSARS protests in Nigeria, impersonators pretending to be protest leaders collected donations meant for the real organizers [6]. Similar tactics have been reported during election periods and international disputes in several countries.
The 2025 rule changes you should know about
Two documented updates changed how X handles lookalike accounts.
- Parody labels. In January 2025, X began rolling out profile labels for parody accounts. Accounts can add the label themselves through Settings and Privacy, and X said it would later share details on when the label becomes mandatory [4].
- Stricter PCF rules. From 10 April 2025, X required parody, commentary, and fan accounts to place a word such as “parody,” “fake,” “fan,” or “commentary” at the beginning of the account name, and to stop using an identical profile photo to the person or brand they depict. X said these rules also apply to accounts that already carry the parody label [5].
X’s own policy page lists all four current requirements for a compliant PCF account: carry a PCF label, avoid an identical avatar, use a clear keyword at the start of the account name, and repeat that keyword in the bio [1].
What the blue checkmark really means (and what it does not)
This is the most misunderstood part of X today. According to X’s own help page, the blue checkmark only means the account has an active X Premium subscription and meets eligibility rules such as a complete profile, recent activity, and a confirmed phone number. X states clearly that it does not mean the account has been ID verified [3].
Here is the quick guide to badge colors:
| Badge | What it actually signals |
|---|---|
| Blue check | Paid Premium subscription meeting eligibility rules, not identity proof [3] |
| Gold check with square avatar | Verified business or organization [3] |
| Gray check | Government institution or official [3] |
| If you live in the European Economic Area, there is one more change to know. Following a European Commission decision of 5 December 2025 under the Digital Services Act, X no longer calls blue checkmark users “verified” in that region and instead labels them “Premium” users. X is appealing the decision in court, but the wording change is already in effect [3]. |
How to protect your account before someone copies it
X publishes a set of official account security recommendations, and they are worth following in full [7].
- Use a strong, unique password of at least 10 characters, mixing uppercase, lowercase, numbers, and symbols. Do not reuse it on other sites, and protect the email account linked to X with an equally strong password [7].
- Turn on two-factor authentication (2FA). X offers three methods: text message, an authentication app, or a hardware security key [8]. An authentication app or security key is safer than SMS, because phone numbers can be hijacked through SIM-swap fraud, a documented attack in many countries.
- Turn on password reset protection in Settings, so a reset link requires both your email address and phone number [7].
- Watch for login alerts. X sends a push or email alert when your account is accessed from a new device. If you get one you do not recognize, change your password immediately [7].
- Be strict about third-party apps. Only connect apps through X’s official OAuth login, and revoke any app you no longer use or do not recognize [7].
- X will never ask for your password by email, direct message, or reply. Anyone who does is a scammer [7].
If you are a public figure, journalist, creator, or business, also consider pinning your one official handle on your other profiles and website. Fact-checkers note that some public figures simply state on their other verified accounts that they are not on X at all, which removes all doubt [6].
How to report an impersonation account, step by step
X says you have three routes, depending on who you are.
If someone is impersonating you
X directs the person being impersonated (or their authorized representative) to file a report through the Help Center using the “I am being impersonated” form [2][9].
If someone else is being impersonated
You can report it as a bystander directly from the fake account’s profile [2]. On the mobile app:
- Open the impersonating profile.
- Tap the three-dot menu at the top right.
- Tap Report.
- Choose the impersonation option and follow the prompts.
If a company or brand you own is being impersonated
If your registered trademark or brand name is being misused, file through X’s trademark policy route instead. X only investigates trademark reports submitted by the trademark holder or their authorized representative, and incomplete reports cause delays, so have your registration details and evidence ready [10].
Evidence to gather before you report
- Screenshots of the fake profile, posts, and any messages, with dates visible
- The account’s exact @handle and profile URL
- Your real account details for comparison
- Trademark registration number, if you own one
What happens after you report
X states that it investigates reported accounts against its rules. Accounts found in violation may be suspended, or asked to update their profile so it no longer misleads people [2]. Two practical notes from X’s own documentation:
- Reporting an impersonator is separate from verification. Reporting a fake account does not automatically verify yours [2].
- X generally does not accept individual requests for inactive or suspended usernames, so do not expect to be handed the impersonator’s handle [2].
Unverified industry estimates. X does not publish official removal timelines. Third-party brand protection practitioners report that clear trademark cases may take roughly 5 to 7 business days, while general impersonation reports can take weeks [11]. Treat these as informal estimates from industry professionals, not guaranteed X service levels.
Myths and rumors, clearly separated from the facts
| Claim | Status | What is documented |
|---|---|---|
| A blue checkmark proves an account is the real person | Myth | X says the blue check only shows an active Premium subscription and eligibility, and explicitly says it does not mean ID verification [3] |
| You need an X account to report an impersonator | Myth | X says you do not need an account to report impersonation [2] |
| All parody accounts are banned | Myth | Compliant PCF accounts are allowed if they carry a label, use a keyword at the start of their name, repeat it in the bio, and avoid an identical avatar [1] |
| Reporting guarantees the fake account will be removed quickly | Rumor | X promises an investigation, not a deadline [2]. Practitioners report delays of days to weeks [11] |
| Impersonators are caught and removed as soon as they appear | Rumor | Fact-checkers have documented impersonation accounts persisting for years despite public exposure [6] |
| Paying X Premium makes you immune to impersonation | Myth | Premium adds a checkmark and some features, but it is not an identity shield, and impersonators can also buy Premium [3] |
When to involve the police
Platform reports handle the account, but they do not recover money or prosecute criminals. If the impersonator stole money, ran an investment scam, or extorted anyone, report it to your local law enforcement agency or national cybercrime unit. INTERPOL confirms that individuals cannot report cybercrime directly to INTERPOL, and that victims should go to their national police, who can coordinate internationally when needed [10]. Keep your screenshots and report confirmations, because they become evidence.
Final thoughts
The single most important habit is simple: never trust an account by its name, photo, or checkmark alone. Open the profile, read the handle character by character, check the join date and follower patterns, and confirm through an official website or another verified channel. Attackers rely on speed and trust. Slow down, verify, and report.
This article is for general information only and is not legal advice. X’s policies change often, so always check the official help pages linked below for the current wording. If you spot an error, an outdated policy detail, or want to suggest a correction, please contact us with feedback and we will review it.
References:
- [1] Authenticity, X Help Center
- [2] Report impersonation accounts, X Help Center
- [3] About X blue checkmark, X Help Center
- [4] X will now label parody accounts, The Hill
- [5] X tightens the screws on parody and fan accounts, Marketing-Interactive
- [6] Despite X’s policies, parody accounts continue to spread disinformation, DAIDAC
- [7] About account security, X Help Center
- [8] How to use two-factor authentication, X Help Center
- [9] I am being impersonated, X Help Center report form
- [10] Cybercrime: our response, INTERPOL
- [11] X/Twitter brand protection: removing fake accounts, Allure Security
