Collect enough public context to identify the impersonating account and explain the harm. More personal data is not automatically better evidence.
Capture these details
- the exact username, display name, biography, and public profile URL;
- profile and cover images where they are relevant to the impersonation;
- URLs and screenshots of posts, comments, advertisements, or messages;
- the date, time, and time zone when you observed each item;
- the platform report number and any response received.
Keep a simple timeline connecting each screenshot to its URL and observation time.
Keep originals and sharing copies
Retain original screenshots without editing them. Create separate redacted copies for advisers or other recipients. Label each copy clearly so you do not confuse it with the original.
Redact unnecessary information
Remove unrelated private messages, contact details, home addresses, financial data, identity-document numbers, and information about other people. Keep the public username, URL, date, and context needed to understand the evidence.
Never include access credentials
Passwords, one-time codes, backup codes, authentication links, and live password-reset links grant access. They are not evidence and should never be shared.
Report the account through the platform's official impersonation channel. Preserve the evidence before contacting the impersonator, because the account or content may be changed or deleted.