Protect Your Identity and Reputation: Expert Legal Defense Against Online Impersonation
Someone created a fake social media account using your name, photograph, and personal details to damage your business relationships or harass your contacts. Online impersonation is the unauthorized use of another person's name, photograph, or identifying information on a website, social media platform, or email account with intent to harm, defraud, intimidate, or deceive — a criminal offense under Texas Penal Code §33.07 and similar statutes in at least 18 U.S. states. Since 2019, our legal team has represented clients in platform takedown proceedings, civil defamation actions, and criminal prosecution support across 14 jurisdictions.
Digital impersonation differs from ordinary identity theft in one critical way: the perpetrator creates a false online persona to post defamatory content, solicit inappropriate contact, interfere with employment or contracts, or fabricate statements you never made. Rather than stealing money, they steal your reputation.
Key Takeaways
- Texas Penal Code §33.07 classifies online impersonation as a third-degree felony if committed with intent to harm, defraud, intimidate, or threaten — meaning 2 to 10 years in prison and up to $10,000 in fines
- Mississippi Code §97-45-33 criminalizes fraudulent online identity creation with penalties of up to five years imprisonment and $10,000 in fines
- Platform reporting alone rarely succeeds. Instagram responds to fewer than 40% of user-generated impersonation reports within 30 days — a formal attorney demand letter cuts that timeframe to 48–72 hours
- Civil remedies include compensatory damages for lost business income and emotional distress, plus punitive damages when malice is proven
- Capture evidence within the first 72 hours — screenshots, metadata, and witness affidavits. After that window, the impersonator often deletes the account, and recovery becomes exponentially harder
What Is Online Impersonation and Why Do You Need a Lawyer?
Online impersonation occurs when someone creates a profile, account, or webpage using your name, likeness, or other identifying information without permission. What separates impersonation from a poorly timed joke is intent: posting as you to damage your professional reputation, sending threatening messages to your contacts, soliciting money or personal information from people who believe they are communicating with you, or fabricating false evidence of statements you never made.
The legal line is narrow. A profile labeled “Not the real [Your Name]” or clearly marked as satire may qualify as protected expression under the First Amendment. A profile that copies your photograph, occupation, and location without any disclaimer — then posts content designed to convince others you wrote it — crosses into criminal territory.
Common impersonation scenarios include:
- Fake social media profiles on Facebook, Instagram, LinkedIn, or dating apps — using your photographs and biographical details to send harassing messages or solicit money from your contacts
- Fraudulent business accounts impersonating executives or employees to authorize wire transfers or redirect client payments
- Revenge impersonation by former romantic partners or business associates, often posting sexually explicit content, threats, or false accusations
- Catfishing schemes where the impersonator uses your identity to deceive third parties into relationships or financial transactions
- Professional sabotage where competitors or disgruntled former employees create fake profiles to post negative reviews or false claims of misconduct
How is online impersonation different from identity theft?
Identity theft targets financial accounts, credit cards, tax records, or government-issued identification to steal money or services. Online impersonation focuses on reputational harm: the perpetrator wants others to believe false statements or conduct originated from you. Both crimes may overlap — an impersonator who opens a bank account in your name commits identity theft; the same person who creates a fake LinkedIn profile to damage your business commits online impersonation. Federal prosecutors often charge both offenses when financial fraud and reputational harm occur together.
Can someone go to jail for impersonating you online?
Yes. Texas Penal Code §33.07 makes online impersonation a third-degree felony punishable by 2 to 10 years in state prison if the impersonator intended to harm, defraud, intimidate, or threaten any person. Mississippi Code §97-45-33 imposes up to five years imprisonment and $10,000 in fines. At least 16 other states enforce similar criminal statutes with penalties ranging from misdemeanor charges to multi-year prison sentences. Federal charges may apply when impersonation crosses state lines or involves wire fraud under 18 U.S.C. § 1343, which carries a maximum 20-year sentence. That said, prosecutors in smaller jurisdictions often decline these cases unless financial loss exceeds $5,000 or the victim is a public official.
What Laws Protect Victims of Online Impersonation?
Texas Penal Code §33.07 defines online impersonation as using another person's name or persona on a social networking site, email, or similar platform without consent and with intent to harm, defraud, intimidate, or threaten. Prosecutors must prove the defendant knowingly created the false profile and acted with specific intent — mere annoyance or embarrassment does not suffice. A conviction carries 2 to 10 years imprisonment plus fines up to $10,000.
Mississippi Code §97-45-33 criminalizes the creation or use of a fraudulent online identity to harm, defraud, intimidate, or threaten any person on websites, social media platforms, email accounts, and instant messaging services. Here’s the critical distinction: the statute does not require proof of actual harm. Intent to harm alone suffices for prosecution, opening the door to criminal charges even when the impersonator has not yet caused measurable damage.
Federal law operates on multiple fronts. The Computer Fraud and Abuse Act (CFAA) criminalizes accessing protected computers without authorization, which may apply when impersonators hack accounts to post false content. Wire fraud statutes under 18 U.S.C. § 1343 penalize schemes to defraud using electronic communications, carrying sentences up to 20 years when financial harm occurs. Identity theft laws under 18 U.S.C. § 1028 prohibit knowingly transferring or using another person's means of identification with intent to commit unlawful activity.
State-by-state variations create jurisdictional headaches. California Penal Code §528.5 criminalizes personation on the internet with intent to harm, intimidate, threaten, or defraud. New York Penal Law §190.25 prohibits criminal impersonation but requires proof the defendant pretended to be another “in such manner as to obtain a benefit or injure or defraud another.” States without dedicated online impersonation statutes may prosecute under general identity theft, harassment, or false accusations online laws.
Civil causes of action provide monetary remedies independent of criminal prosecution. Defamation and false publications claims arise when the impersonator posts false statements of fact that harm your reputation. False light invasion of privacy applies when the impersonator creates a highly offensive false impression about you to a reasonable person. Intentional infliction of emotional distress requires proof of extreme and outrageous conduct exceeding all bounds of decency. Tortious interference applies when impersonation damages business relationships, contracts, or employment.
Is online impersonation a felony or misdemeanor?
Classification depends on state law and the defendant's intent. Texas treats online impersonation as a third-degree felony when committed with intent to harm, defraud, intimidate, or threaten. Mississippi classifies fraudulent online identity creation as a felony with up to five years imprisonment. California prosecutes most cases as misdemeanors unless the conduct involves elder abuse or commercial harm exceeding specified thresholds. States without dedicated statutes may charge impersonation under misdemeanor harassment laws or felony identity theft statutes depending on the conduct and harm.
What states have specific online impersonation laws?
At least 18 states enforce dedicated online impersonation or internet personation statutes as of 2026: Texas, Mississippi, California, New York, Oklahoma, Washington, Louisiana, Rhode Island, Hawaii, Illinois, Nebraska, Utah, Georgia, North Carolina, Arizona, Tennessee, Arkansas, and West Virginia. Each statute defines prohibited conduct slightly differently — some require proof of harm, others criminalize the impersonation itself, and several limit enforcement to social media platforms. States without specific laws may prosecute under general identity theft, fraud, or cyberstalking statutes.
How Can an Online Impersonation Lawyer Help You?
Immediate response begins with emergency takedown requests to social media platforms. Instagram, Facebook, LinkedIn, Twitter, and TikTok maintain abuse reporting systems that respond faster to attorney demand letters than user-generated reports. We submit documented evidence of impersonation with legal citations to platform terms of service violations, cutting removal time from weeks to 48–72 hours in most cases. Cease and desist letters sent directly to the impersonator — when identity is known — create legal records of notice that strengthen later civil and criminal claims.
Preservation of evidence through digital forensics prevents the impersonator from destroying proof. Screenshots alone rarely survive litigation; courts require metadata showing post dates, account creation timestamps, IP addresses, and user activity logs. We coordinate with forensic investigators to archive entire profiles, recover deleted content from cached servers, and obtain witness affidavits from people who viewed the fraudulent account. This evidence package supports both platform takedown requests and criminal complaints to law enforcement.
Criminal prosecution support means working directly with law enforcement cyber units. Many police departments—especially in smaller jurisdictions—simply lack the training or resources to investigate internet crimes properly. We build comprehensive evidence packages with statutory citations, witness statements, and documented harm, then present the case to detectives and district attorneys. Victim advocacy doesn’t stop there. It includes attending grand jury sessions, filing victim impact statements, and pursuing restitution orders that require the defendant to compensate you for documented financial losses.
Civil litigation offers monetary damages when criminal prosecution is unavailable or won’t recover what you’ve lost. Filing lawsuits for online defamation removal obtains court orders requiring platforms to disclose the impersonator’s identity through subpoenas. Restraining orders and preliminary injunctions stop further impersonation conduct while the case proceeds to trial. Compensatory damages recover lost business income, therapy expenses, credit monitoring costs, and other economic harm. Punitive damages serve a different purpose entirely—they punish particularly malicious conduct and deter future violations by sending a financial message.
Executive impersonation and fraudulent vendor accounts create urgent problems for corporations. We defend companies against fake LinkedIn profiles impersonating CEOs to authorize wire transfers, fraudulent customer service accounts used in phishing schemes, and competitor-created parody accounts designed to tank brand reputation. Corporate reputation defense strategies include trademark enforcement actions when impersonators use company logos, emergency domain takedowns for fraudulent websites, and coordination with brand protection services monitoring dark web marketplaces.
Sometimes the accused is you. Overly broad platform content moderation systems and malicious reporting by adversaries result in account suspensions for legitimate users who did nothing wrong. We represent individuals and businesses wrongly banned from social media, employees accused of creating fake profiles they never made, and public figures targeted by false impersonation claims designed to silence criticism.
How much does an online impersonation lawyer cost?
Legal fees depend on case complexity and what you actually need. Emergency platform takedown requests typically range from $2,500 to $7,500 for initial demand letters, evidence preservation, and platform liaison work. Criminal prosecution support—including evidence packages, law enforcement coordination, and victim advocacy—costs $5,000 to $15,000 depending on jurisdiction and how complicated the investigation becomes. Civil litigation starts at $15,000 for filing complaints and discovery, but reaches $40,000 to $100,000 through trial when depositions, expert witnesses, and extensive motion practice enter the picture. Some cases qualify for contingency fee arrangements where we receive a percentage of damages recovered rather than hourly fees—which means you don’t pay unless you win.
What evidence do I need to prove online impersonation?
Courts require proof the defendant created or used a profile containing your name, photograph, or identifying information without permission. Screenshots must include timestamps, visible URLs, and context showing the impersonator claimed to be you. Witness affidavits from people who viewed the fake account and believed it was yours establish the deceptive nature. Platform records obtained through subpoenas provide account creation dates, IP addresses, email addresses used for registration, and user activity logs. Communications from the impersonator—messages sent to your contacts, posts made under your name, friend requests or follows—demonstrate the scope of the fraudulent activity. Evidence of harm includes business records showing lost clients or contracts, medical records documenting emotional distress, and financial statements proving monetary losses.
⚠️ Time is critical — every day matters
Get a free case assessment
Our team specialises in cases with an international element. We review applicable treaties, assess risks, and prepare an action plan.
Frequently Asked Questions
What is the difference between impersonation and parody?
Parody uses your name or likeness for commentary, criticism, or humor — with clear disclaimers. A profile labeled “Parody of [Your Name]” or “Not the real [Your Name]” in the bio typically qualifies as protected speech under the First Amendment. Impersonation happens when the fake profile has no disclaimers and a reasonable person would believe you created and control it. Courts examine context: Is the satirical intent obvious? Did a substantial number of viewers actually get fooled? Commercial parody loses First Amendment protection even with disclaimers — using your identity to sell products or services crosses the line.
Can police track down anonymous online impersonators?
Law enforcement can identify anonymous impersonators through subpoenas. Social media companies keep account creation records: email addresses, phone numbers, IP addresses, device identifiers. Subpoenas to internet service providers trace IP addresses to physical locations and subscriber names. This takes weeks or months and requires probable cause that a crime occurred. Smaller police departments often won’t pursue these investigations without documented financial loss exceeding several thousand dollars or credible threats of violence.
What should I do if the impersonator lives in another country?
International cases present real obstacles. U.S. courts can’t prosecute defendants abroad unless extradition treaties allow their return for trial — and most countries refuse to extradite for cyber offenses without evidence of physical violence. Civil lawsuits can proceed in U.S. courts where harm occurred, but enforcing money judgments against foreign defendants requires registering the judgment in their home country, which is expensive and uncertain. Platform takedowns work regardless of location. Instagram, Facebook, and LinkedIn remove accounts for terms-of-service violations whether the user is in California or another continent. Focus on platform removal first, preserve evidence, and pursue civil claims if the defendant has assets in the U.S.
How do I prove the fake account damaged my reputation?
You’ll need to show that real people saw the false content, thought it came from you, and then acted differently as a result. This is harder than it sounds—judges won’t assume damage just because a fake account exists.
Direct proof comes from witnesses. Business partners, clients, or acquaintances who saw the fake posts and questioned your character can sign affidavits describing what they saw and how it affected their view of you. Concrete losses speak louder than feelings: a contract terminated because of the impersonator’s posts, a job offer withdrawn, a partnership canceled. These show economic harm a court can measure.
Document any effort you made to fix things—emails where you corrected false accusations, screenshots showing you addressed the misimpressions. The fact that you had to spend time and energy correcting lies proves the damage existed. For professional reputation cases, consider expert testimony from reputation management specialists or industry insiders who can explain how the false posts harmed you within your field.
Numbers matter too. Screenshots showing post views, likes, and shares demonstrate how many people encountered the fake content—wider reach means greater potential damage.
Can I get a restraining order against an online impersonator?
Yes—but only if you can name the person responsible. Courts will issue restraining orders that prohibit further impersonation when you demonstrate harassment, threats, or ongoing harm. A preliminary injunction can stop the impersonator from creating new fake accounts or posting more false content while your civil lawsuit moves forward. In urgent situations, you may qualify for an emergency temporary restraining order within 24 to 48 hours if immediate harm is occurring.
The real obstacle: anonymity. Restraining orders require serving a named defendant at a known address. If the impersonator stays hidden behind a VPN or shell accounts, you’re stuck until law enforcement or civil discovery uncovers their identity. Once identified, getting a restraining order with documented evidence of impersonation and harm becomes routine.
What is Section 230 immunity and how does it affect my case?
Section 230 of the Communications Decency Act is a legal shield that protects internet platforms—not individual users. Facebook, Instagram, Twitter, and every other social platform cannot be sued for defamation, emotional distress, or other harms caused by posts from third-party users. Only the person who created the impersonator account faces liability.
This protection has limits. Section 230 does not force platforms to host impersonation content; they retain full discretion to remove fake accounts that violate their terms of service, and they face no legal penalty for doing so. The immunity also disappears when a platform creates or substantially develops content itself rather than simply hosting what users post. But in your impersonation case, Section 230 becomes largely irrelevant because your lawsuit targets the impersonator directly, not the platform.