Safety Guide · 11 min read · March 6, 2026

What Is Catfishing? Signs, Risks & How to Protect Yourself

Catfishing is creating a fake online identity to deceive someone. Learn the warning signs, how to verify someone's identity, and what to do if you've been catfished.

What Is Catfishing? Signs, Risks & How to Protect Yourself

Catfishing is the practice of creating a fake online identity to deceive another person, typically for romantic manipulation, financial fraud, or emotional exploitation. The term originated from the 2010 documentary Catfish and has since become the standard term for any form of identity deception online — from fake dating profiles to elaborate impersonation schemes.

Catfishing is far more widespread than most people assume. According to the FTC, Americans reported losing $1.3 billion to romance scams in 2022 — and nearly all romance scams begin with a catfish: a fake profile built to gain trust before extracting money, information, or intimate content.

This guide covers the warning signs of catfishing, how to verify someone’s identity, what to do if you’ve been catfished, and how to protect yourself going forward.

In this guide:

Common Forms of Catfishing

Catfishing takes many forms, but all share a common element: a fabricated identity used to deceive.

Romance catfishing. The most common form. The catfish creates an attractive dating profile using stolen photos, builds an emotional connection through weeks or months of messaging, then exploits that connection for money, intimate photos, or emotional control. This often evolves into romance scams or sextortion.

Financial catfishing (pig butchering scams). The catfish builds trust through a fake romantic or professional relationship, then introduces a “can’t-miss” investment opportunity — typically cryptocurrency, forex, or a fake trading platform. The FBI classifies pig butchering as one of the fastest-growing forms of online fraud, with billions in reported losses.

Social media impersonation. Someone creates a fake profile using your name and photos to deceive your contacts. This may be used to scam your friends and family, damage your reputation, or gain access to information about you.

Revenge catfishing. An ex-partner or someone with a grudge creates a fake profile impersonating the victim — sometimes on dating apps or adult sites — to cause embarrassment or social harm.

Underage predation. Adults posing as teenagers to target minors. This is one of the most dangerous forms of catfishing and is aggressively prosecuted by federal law enforcement.

How Catfishing Harms Victims

The damage from catfishing extends well beyond the initial deception.

Financial loss. Romance scam victims lose a median of $4,400 according to FTC data, though individual losses can reach hundreds of thousands of dollars. Pig butchering scam victims often lose even more because the fake investment platform shows artificial “gains” that encourage increasingly large deposits.

Emotional and psychological harm. Victims of romantic catfishing experience a form of betrayal trauma. The person they trusted, confided in, and formed an emotional bond with never existed. This can cause lasting trust issues, depression, anxiety, and difficulty forming new relationships.

Sextortion risk. If the victim shared intimate photos or videos during the catfish relationship, the perpetrator may use that content for blackmail — demanding money or additional content in exchange for not distributing the images.

Identity theft. Information shared during a catfish relationship — full name, address, workplace, photos, financial details — can be used for broader identity theft, account compromise, or social engineering attacks.

Reputational damage. If the victim’s photos are used to catfish others, the victim may be mistakenly blamed for the catfish’s behavior — damaging their personal and professional reputation.

Warning Signs: How to Spot a Catfish

These red flags don’t guarantee someone is a catfish, but multiple signs together should raise serious suspicion:

They refuse video calls. This is the single most reliable indicator. A real person has no lasting reason to avoid a video call. Repeated excuses — broken camera, too shy, bad connection — over days or weeks are a strong signal.

Every photo looks professionally shot. Real dating profiles include casual shots — gym selfies, group photos, blurry snapshots. If every single photo looks like a modeling portfolio, the images may be stolen from a model or influencer.

The relationship escalates unusually fast. Declarations of love within days, intense daily messaging, and pressure to become exclusive before meeting in person are manipulation tactics designed to build emotional dependency before the scam reveals itself.

They always have excuses to avoid meeting. One cancellation is normal. A pattern of cancellations — work travel, family emergency, health crisis — repeated over weeks or months means you’re likely being catfished.

They ask for money or personal information. Once emotional trust is established, requests for financial help, gift cards, wire transfers, cryptocurrency, or personal details like your home address are classic scam indicators.

Their online presence is thin or inconsistent. Real people typically have years of social media history with organic interactions. A Facebook profile created two months ago with 50 friends, no tagged photos, and no comments from real people is suspicious.

Their story has inconsistencies. Pay attention to details. If they say they’re a doctor but don’t know basic medical terminology, claim to live in one city but mention landmarks from another, or give contradictory timelines — these are signs of a fabricated identity.

How to Verify Someone’s Identity

Before investing emotional energy in someone you’ve only met online, verify they’re real:

Ask for a video call. This is the simplest and most effective test. A real person can do this in minutes. A catfish cannot.

The selfie test. Ask them to take a selfie holding up a specific number of fingers or a piece of paper with today’s date. This takes 10 seconds for a real person. A catfish using stolen photos cannot do it.

Cross-reference their social media. Look up their name on Instagram, Facebook, LinkedIn, and Twitter. Check whether their photos, name, age, location, and story are consistent across platforms. Check their followers — real people have mutual connections and organic interactions.

Reverse image search their photos. Upload their profile photo to Google Images or TinEye to check if it appears on other profiles or stock photo sites. This catches catfish who use widely available stolen photos, though it misses those who crop or filter images.

Use facial recognition for a comprehensive check. Privacy Leak scans the face against hundreds of millions of indexed images. Unlike Google or TinEye, it matches the face itself — not the image file — so it catches cropped, filtered, and edited photos. It also scans adult content sites where catfish frequently source stolen photos.

→ Try a free scan at privacyleak.ai

What to Do If You’ve Been Catfished

1. Stop all communication

Once you’ve confirmed the deception, cease contact immediately. Don’t confront the catfish — they may delete their accounts and conversations, destroying evidence you’ll need.

2. Document everything

Screenshot all conversations, the fake profile, every photo they sent, and any personal information they shared with you (phone numbers, usernames, payment details, email addresses).

3. Report the fake profile

Report on every platform where you encountered them. Dating apps (Tinder, Bumble, Hinge), social media (Instagram, Facebook), and messaging apps all have reporting mechanisms for fake accounts.

4. Report financial fraud

If you lost money, file reports with:

5. Check if your photos were stolen

If someone catfished you, your photos may also have been used to catfish others. Run your own face through a facial recognition scan to check whether your photos appear on dating sites, social media accounts, or adult platforms where you didn’t post them.

6. If you shared intimate photos, act immediately

This puts you at risk of sextortion. Scan for your face on adult sites using facial recognition. If anything surfaces, document it and pursue removal through platform reporting, DMCA takedowns, or Privacy Leak’s Legal Takedown Service for anonymous removal.

How to Prevent Catfishing

Verify before you trust. Video call early in any online relationship. If they refuse, be suspicious.

Guard personal information. Don’t share your home address, workplace, financial details, or intimate photos with someone you haven’t met in person and verified independently.

Use reverse image search proactively. Before investing emotionally, check their profile photos through Google or a facial recognition tool. A 30-second search can save months of deception.

Be skeptical of perfection. Real people are imperfect. If someone seems too good to be true — stunning photos, an ideal career, and intense romantic interest in you from day one — apply extra scrutiny.

Trust your instincts. If something feels off, it probably is. Pay attention to the red flags outlined above. It’s better to be cautious and wrong than trusting and scammed.

How Privacy Leak Can Help

Privacy Leak is useful at two points in the catfishing lifecycle:

Before you’re catfished — verification. Upload a suspicious person’s photo and check whether their face appears on other social media profiles under different names, on stock photo sites, or on adult content platforms. If the same face appears under multiple identities, you’re dealing with a catfish.

After you’ve been catfished — protection. If you shared intimate photos, scan your own face to check whether those images have been distributed. If they have, the Legal Takedown Service handles removal anonymously.

FAQ

What is catfishing in simple terms?

Catfishing is pretending to be someone else online — usually by creating a fake profile with stolen photos and a fabricated identity — to deceive another person. It’s most commonly associated with dating scams, but it also occurs on social media, professional networks, and messaging apps.

Is catfishing illegal?

Catfishing itself (creating a fake profile) isn’t specifically illegal in most jurisdictions. However, the actions that typically accompany catfishing — fraud, extortion, identity theft, harassment, and solicitation of minors — are all illegal. If a catfish steals money from you, it’s prosecutable as fraud regardless of the fake identity.

How can I check if someone is catfishing me?

The fastest test is asking for a video call — catfish will refuse or make excuses. Beyond that, reverse image search their photos via Google or use facial recognition tools like Privacy Leak for a more thorough check. Cross-reference their name and details across social media platforms.

What should I do first if I discover I’ve been catfished?

Stop communicating immediately. Screenshot all conversations and the fake profile before the catfish can delete them. Then report the fake account to the platform. If you lost money, report to the FTC and FBI IC3. If you shared intimate photos, scan for your face on adult sites immediately.

Can catfishing lead to sextortion?

Yes, frequently. Catfish who obtain intimate photos during the relationship may use them for blackmail — demanding money or additional content in exchange for not distributing the images. This is sextortion, a federal crime in the United States.

How do I know if my photos are being used to catfish others?

Run your face through a facial recognition tool to find all public appearances of your photos online. If your face appears on dating profiles, social media accounts, or websites you didn’t create, someone is likely using your photos. Report fake accounts to each platform immediately.

Does Privacy Leak detect catfish on dating apps?

Privacy Leak doesn’t search within dating apps directly. It searches the broader web — social media, public databases, and adult content sites. If a catfish stole someone’s photos, the originals likely exist on Instagram, Facebook, or other public platforms. Privacy Leak finds those matches regardless of which dating app the suspicious profile appears on.

A pig butchering scam is a type of financial fraud that begins with catfishing. The scammer builds a fake romantic or friendly relationship (the “fattening” phase), then introduces a fraudulent investment opportunity. The victim is encouraged to invest increasing amounts before the scammer disappears with all the money.

Key Takeaways

  • Catfishing is creating a fake online identity to deceive — most commonly for romance scams, financial fraud, or sextortion.
  • The biggest red flag is refusing video calls. Ask early and treat consistent refusal as confirmation of deception.
  • Before investing emotionally, verify: video call, selfie test, social media cross-reference, and reverse image search.
  • If you’ve been catfished, document everything before confronting, report to platforms and law enforcement, and check if your own photos were stolen.
  • If you shared intimate photos with a catfish, scan for your face on adult sites immediately — sextortion is a real risk.
  • Facial recognition catches catfish that Google and TinEye miss, because it matches faces rather than image files.

→ Start your free scan at privacyleak.ai