Who Is Behind a Fake Instagram Account? What Indian Businesses Can Find Out
Instagram will not tell you who runs a fake account - but the account itself, and the accounts around it, reveal more than most businesses check. What you can establish, and when identity disclosure needs police or a court.
5 min read
On this page
Key takeaways
- Instagram does not disclose who operates an account to the public or to the business being impersonated.
- The 'About this account' panel, former usernames, reused images, and linked accounts usually show whether one fake is part of a wider operation.
- Identity disclosure in India goes through police (for fraud or cheating by personation) or a court order - not through Instagram's support team.
- For a business, removing the fake and preventing the next one matters more than naming the operator.
A fake Instagram account using your brand name, logo, and product photos is rarely a one-off. It is usually built to redirect your customers - to a WhatsApp number, a payment link, or a lookalike website - and the first question most owners ask is who is doing it.
Instagram will not answer that question for you. But you can establish far more about the account than most businesses check, and that evidence decides whether you need a takedown, a police complaint, or a court order.
Why the operator matters less than the operation
Fake brand accounts damage trust in two ways: customers who pay the impersonator lose money, and customers who hear about it start doubting the real account. Searches for 'fake profile' in India have grown sharply over the past year, and impersonation accounts tend to return under new usernames within weeks of removal.
That is why the useful question is not only 'who is this?' but 'what else is this person running?' One fake account linked to a clone website and two more profiles is a different problem - and a stronger report - than a single account.
What the account itself reveals
Open the profile, tap the three-dot menu, and choose 'About this account'. Instagram shows the date the account joined, the country it is based in (judged from the account's activity), how many times its username has changed, and accounts with shared followers. A brand account 'based in' another country, created last month, with several former usernames, is a strong signal of a recycled scam account - and the shared-followers list often surfaces its sister accounts.
Check the bio link and any phone or WhatsApp number in the bio or highlights. The same number or domain often appears on other fake profiles, marketplace listings, or classified ads. Reverse-image search the profile picture and product photos to see where else they are being used.
Screenshot everything - profile, bio, posts, highlights, the 'About this account' panel, and any messages sent to your customers - with dates and URLs. Impersonators often delete or rename the account once it is reported.
What not to do
Do not try to unmask the operator through password-reset tricks, fake links, or by messaging them under a false identity. These can break the law, alert the operator, and weaken any later complaint. Do not publicly name a suspect without evidence - that creates a defamation risk of its own.
When identity disclosure is possible in India
If customers have been cheated, file a complaint on cybercrime.gov.in or call the 1930 helpline. Cheating by personation is an offence under the Bharatiya Nyaya Sanhita and, where a computer resource is used, under Section 66D of the IT Act. Police can request account information from Meta through its law-enforcement process - a business cannot.
Where there is no fraud complaint but the impersonation is causing serious harm, the Delhi High Court has, in impersonation and personality-rights suits, ordered platforms to take down infringing accounts and disclose the Basic Subscriber Information and IP logs linked to them. That route needs counsel and is usually justified only for persistent or high-impact cases.
For most businesses, Instagram's own impersonation report - backed by proof that you operate the real account - removes the fake far faster than either route identifies the person behind it.
How DiReFTY helps
DiReFTY monitors for accounts, domains, and listings impersonating a brand, links them by shared numbers, images, and payment details, and preserves the evidence before reporting. That turns one takedown into a mapped operation - which is what makes repeat accounts easier to remove and, where needed, gives police or counsel a complete file to work from.
Frequently asked questions
Can Instagram tell me who created a fake account of my business?
No. Instagram does not disclose account-holder information to the public or to the business being impersonated. It removes accounts that breach its impersonation policy, and shares account information with police through its law-enforcement process.
How can I tell if several fake Instagram accounts are run by the same person?
Compare the 'About this account' details, former usernames, bio links, phone or WhatsApp numbers, payment details, and reused images. Shared numbers, domains, or payment handles are the most reliable links between accounts.
Should I file a police complaint about a fake Instagram account?
If customers have been cheated or asked to pay, yes - report it on cybercrime.gov.in or the 1930 helpline with screenshots and payment details. For impersonation without fraud, Instagram's impersonation report is usually the faster first step.
Know your digital reputation exposure
Start with a free assessment of the threats targeting your brand across every channel.
Keep reading
Why Every Business Needs a Digital Reputation Safety Strategy
Reputation management used to be reactive. Modern digital threats demand a structured, proactive strategy built on Detect, Respond, Enforce, Protect.
GuideDPDP Act Compliance and Your Brand's Digital Trust
Data protection failures don't stay a compliance problem - they become a trust problem the moment customers find out. What DPDP non-compliance risks for a brand's reputation, and where readiness begins.