A fake profile is not a single injury. It is a costume. Sometimes the costume is there to insult you. Sometimes it is there to invoice your clients. Sometimes it is a joke that got out of hand, and sometimes it is a competitor wearing your logo. Australians who hit “report profile” as if every platform kept one impersonation drawer will wait, then get a template that says the account does not violate. The company is not calling you a liar. It is telling you that you used the wrong product.
If you remember one distinction from this guide, make it this one: identity, trademark and parody are different queues. A personal name is not a trademark. A labelled satire account is not a scam. A business page that is collecting deposits in your trading name is not a speech issue. The platform takedowns hub is the library for ordinary posts. This piece is for the account that should not exist.
What each company will actually consider
Meta — Facebook and Instagram. The useful flow is “pretending to be me” or “pretending to be someone else”, not “I don’t like this Page”. You will be asked to prove you are the person or the authorised representative of the business. Meta will not retire every account that has borrowed your face for a meme. It will, more reliably, retire an account that is messaging your friends as you, running ads as your shop, or sitting on a handle that is being used to phish. The practical Meta walkthrough is in Facebook and Instagram takedowns; use that piece for the buttons, and this one for the identity argument.
LinkedIn. Professional impersonation is the product LinkedIn is least embarrassed to enforce. A clone of your profile that solicits jobs, testimonials or invoices is a clean report. A critic who has used a close variant of your name to write a true complaint about your firm is not. Company-page impersonation — the fake “Telstra Billing” or the lookalike recruiter — belongs in the scam and trademark drawers as much as the identity drawer. File both. LinkedIn’s trust queue is slow and its appeals are thin, but a well-built business report still deletes pages that a personal report will not.
X. Impersonation policy on X is a narrower gate than people remember. The company has, for years, tolerated parody, commentary and fan accounts if they are labelled. It has also left standing plenty of unlabelled clones. The report that works is the one that shows the account is acting as you: DMs to your customers, a bio that claims your job title without a satire marker, a payment link. A mean account that is obviously about you, named after you, and full of insults may still be treated as speech. That is a policy choice, not a finding about Australian law.
What none of the three will do, even if you ask weekly: hand you the impersonator’s registration email; award you a handle because you had it first in 2012; or apply a European personality right to an ordinary Australian name collision.
Trademark versus a personal name
This is the mistake that burns the most time.
If you own an Australian registered trade mark, or you are clearly authorised to speak for the owner, you have a trademark complaint as well as an impersonation complaint. Use both. Trademark flows are built for brands. They understand lookalike logos, paid ads and handle-squatting in a way that the “that’s my birth name” flow does not.
If you do not own a mark, do not file a trademark notice. You will be denied, and some reviewers treat a denied trademark claim as colour against the later identity claim. Your name, your face and your job title are identity facts. They are not, without more, proprietary rights in the trade-mark sense.
Business names and ACNs help on LinkedIn and on Meta business Pages. They do almost nothing on a personal Facebook profile that has used your photograph and a suburban address. There you need the impersonation form, evidence that people are being misled, and patience.
A company secretary chasing a fake customer-service account should bring: the ASIC extract or ABN, a screenshot of the real site, the fake handle, the ad creative if any, and every customer email that shows confusion. One of those emails is worth more than a paragraph of outrage.
Parody, commentary and the labelled exception
Platforms keep a parody exception because they do not want to be the Ministry of Jokes. The exception is not a human right, and it is not uniform.
A profile that says “parody”, “fan”, “not affiliated” or uses an obvious satirical name will usually survive an impersonation report on X and often on Meta. LinkedIn has less of a sense of humour and a lower tolerance for professional lookalikes. That is the product, not a moral theory.
The exception collapses when the account stops being about you and starts being you. Messages to your staff, invoices, job offers, password-reset bait, a bio that lists your actual workplace without a satire marker — those are impersonation even if a joke started the handle. Say that, in one sentence, on the form. Attach the DM, not a thread of your friends agreeing that it “feels off”.
Australian law does not give you a general right to have a parody taken down, and it does not give the parodist a general right to keep it up. Defamation, passing off and the Australian Consumer Law can all be relevant when a joke becomes a trading instrument. Those are solicitor letters, not report buttons. eSafety’s adult cyber-abuse scheme is the administrative route if the account is being used to cause serious harm and the ordinary report has failed. It is not a parody tribunal.
Business impersonation is a different clock
Treat a fake shop, a fake insurer, a fake recruiter or a fake “payments team” as a scam first and a reputation problem second. The customers who are about to pay are the emergency. Your brand search is the afternoon’s work.
Report the account on the platform’s scam or fraud flow as well as impersonation. If there is an ad, report the ad. If money has already moved, file with the bank or card scheme and with ACORN. If the impersonator is using your ABN, your logo and a lookalike domain, write to the registrar and to the host; do not wait for Meta to finish a review that can take a fortnight.
Then do the reputation half: search your trading name plus “login”, “support”, “invoice”. Clone landing pages often outlive the social profile. Those URLs belong in a host takedown and, if they rank, in a Google legal or personal-information removal once you have the paperwork.
Prepare the file, including the ID step
Most impersonation reports die on identity, not on the merits.
- The profile URL, not a screenshot of a search result.
- Side-by-side captures of the fake profile and your real one, dated, showing the photo, the handle and the bio.
- Evidence of confusion or harm — a customer email, a DM, a job application sent to the clone, a payment receipt. “My friends are upset” is not evidence.
- The hook in one sentence. “This account is messaging my clients as my business.” “This account uses my photograph and my job title and is not labelled as parody.”
- Identification, through the platform’s own portal. Redact the licence number if the form allows. Do not send the same scan to three freelancers and a WhatsApp group.
Keep a second, locked-down account so that a ban or a hack does not take the evidence locker with it. Do not confront the impersonator in a public comment. You will feed the joke and you will create a thread the platform then treats as a dispute between two users.
A working sequence we recommend
- Capture the fake profile, the ads and any customer contact.
- Decide which queue you are in: personal impersonation, labelled parody, trademark, or business scam. File the matching form, not all of them at random.
- Complete the ID step on the same day. Abandoned identity checks expire.
- If customers are being approached, warn them on your real channels and report the scam flow in parallel.
- If the account is causing serious harm and the platform has refused, consider eSafety’s adult cyber-abuse scheme and a solicitor’s letter. Do not start with a defamation concerns notice you cannot stand behind.
- Recheck in a fortnight. Impersonators clone. Diary the handle, not just the URL.
If you want the desk to look at a general question about the process, use contact. Do not send your licence, the impersonator’s messages, or a zip of customer files. We publish method. We do not run your case.