Know what an impersonation attempt can look like
A copied business profile can borrow a logo, photos, public offers and the names of real employees. The Canadian Anti-Fraud Centre warns that impostor social accounts may contact a business’s followers with fraudulent messages or promotions. A customer who sees a familiar brand may assume a request for card details or a “prize fee” is genuine.
Impersonation can use a slightly different handle, an extra punctuation mark or a look-alike spelling. It may also happen through a fake employee or owner profile. Encourage customers to verify an offer through the company website or a previously established channel instead of replying to a new message.
Reduce the chance of your own account being taken over
Use unique passwords and multifactor authentication, keep recovery email and phone details current, and limit administrator roles. Give each employee a named account where the platform supports it. Remove access promptly when duties change. Store official account handles and authorized administrators in a company-controlled record.
Avoid sharing login codes over chat. Be cautious of direct messages that claim to be platform support and ask for credentials or remote access. Review recent sessions, connected apps and advertising permissions. Maintain a second internal contact who can help recover the account if the usual administrator becomes unavailable.
Create a response plan for copycat profiles
Save the impostor profile URL, screenshots, message text and time observed. Report the profile through the platform’s official process and ask affected customers to report it too, without encouraging them to confront the account. Do not publish a screenshot containing a victim’s private details. Use your legitimate website or account to state which handles are official.
If money or login details were requested, tell customers what they should do next: stop replying, contact their bank if payment details were shared, and use official reporting channels. Keep the wording calm and factual. Avoid repeating a scam link in a public post, because that can make it easier for other people to find.
Make promotions easy to authenticate
Publish contest terms, entry rules, end dates and the way winners will be contacted on a stable page of your official website. State clearly that the business will not request a password or an upfront fee to release a prize. Link to the official promotion from the social profile so customers have a reference outside the original post.
Search periodically for your brand name and common misspellings on the platforms where customers engage. Assign an owner to check reports and update the official-account page when handles change. These routines cannot prevent every impersonation, but they give customers and employees a verified source to compare with a suspicious message.
Practical checklist
- Enable multifactor authentication and limit social account administrator roles.
- Maintain a public list of official business accounts and promotion terms.
- Save evidence and report impersonators using the platform’s official process.
- Warn customers through a known website or verified account.
In short
Protect the real account, make genuine offers easy to verify, and give customers a calm, official place to check suspicious messages.
This article is general educational information, not legal, privacy, cybersecurity or financial advice. Confirm requirements for your situation with a qualified professional.