Someone Made a Fake Facebook Page of My Business: What to Do

Do this in the next hour

Before you report anything, capture evidence. Meta may remove the Page, and the proof goes with it. You want the Page URL, the Page name, the profile photo, the cover photo, the pinned post, the About section, any phone number or WhatsApp link, any payment link, and screenshots of the messages it is sending your customers. Save the URL as plain text somewhere, not just in a screenshot.

If money has already moved, the bank comes before Meta. A customer who paid a fake Page has a chargeback window that closes. Tell them to call their card issuer or bank now. Reporting the Page does not get anyone's money back.

Then post a warning on your real Page and pin it. Say the fake account's exact username, say you will never ask for payment by DM, and tell people how to reach you. This is the single fastest thing that reduces harm, and it costs nothing. Do the same by email and on any other channel your customers use.

File with the FTC at reportfraud.ftc.gov and, if there was a financial loss, with the FBI at ic3.gov. Neither of these removes the Page. Both build a record, and that record matters if this becomes a pattern or a legal matter later.

• Screenshot the Page and copy its URL before reporting
• Tell any customer who paid to call their bank today
• Pin a warning on your real Page naming the fake account
• File at reportfraud.ftc.gov, and ic3.gov if money was lost

Work out which problem you actually have

Meta treats these as different violations, and picking the wrong report category is a common reason a report goes nowhere.

A Page using your exact business name, your logo and your product photos is impersonation under Meta's Authentic Identity Representation policy, which prohibits using another party's name, image or likeness to deceive, and prohibits speaking in the voice of a business you are not authorised to speak for.

A personal profile set up as though it were your business is a separate and easier case. Meta does not allow profiles that represent a non-human entity such as a business. That rule is written down, so say so in your report.

A Page running a scam in your name, taking orders or payments, also falls under Meta's Fraud, Scams and Deceptive Practices policy, which covers "falsely claiming to represent, or speak in the voice of, an established business" in order to defraud. If the fake Page is taking money, report it under fraud as well as impersonation. It is a stronger claim.

A Page with a similar but not identical name is the hardest case, and you should be realistic. Meta says openly that it cannot settle disputes between two parties. If the name is merely close, or descriptive, or a common word, expect Meta to decline and leave you to sort it out directly or through a lawyer.

Report it inside Facebook first

Do this from the account that manages your real Page, not a personal account with no connection to the business.

Go to the impersonating Page. Click the options button near the cover photo, choose Report Page, and follow the prompts. Route through the scams and fake pages options and pick the choice about pretending to be another business or organisation. If a personal profile is posing as your business, use Report Profile instead and choose the option about pretending to be someone else.

Your report is anonymous. The Page will not see who reported it. There is one exception, covered in the trademark section below, and it matters.

Ask a handful of real customers or staff to report it too, from their own accounts, using the same category. Do not buy reports and do not organise a mass campaign, because Meta's Inauthentic Behavior policy prohibits misusing its reporting systems. A few genuine reports from unrelated accounts is enough.

If you cannot report inside the app

Meta has a form called Report an Impostor Account at facebook.com/help/contact/295309487309948. It asks which situation describes you, whether you have a Facebook account, your full name, your contact email, the full name on the impostor profile, the link to the impostor profile, and additional information.

Read the next part carefully, because it catches people out. That form also asks you to upload identification. So does the Instagram and Threads equivalent at help.instagram.com/contact/636276399721841, which additionally asks for a photo of you holding your ID. These forms were built around a person being impersonated, not a company, and the ID is how Meta confirms you are who you say you are.

If you use those forms, you upload your ID directly to Meta yourself. Never hand a government ID document to an agency, a consultant, or anyone offering to file on your behalf. We do not accept them, and neither should anyone else.

The trademark route, and the trap inside it

If you own a registered trademark, the Trademark Report Form at facebook.com/help/contact/trademarkform is a stronger lane than a standard impersonation report. It asks for your full name, your email, the name of the rights owner, documentation proving you are the rights owner, what the trademark is, where it is registered, the registration number, a link to the registration record, and up to 30 links to the infringing content. You sign it electronically under penalty of perjury.

Here is the trap. Impersonation reports are anonymous. Intellectual property reports are not. Meta routinely passes the rights owner's name, your email address, and the details of your report to the person whose content you reported. Meta says so in its own help pages and advises using a general business or professional address rather than a personal one.

So before you file, set up something like legal@yourdomain.com or brand@yourdomain.com and use that. Do not file a trademark report from your personal Gmail. The person running a fake Page is not a good person to hand your inbox to.

Meta also states plainly that it cannot adjudicate disputes between third parties and will not act on cases that require a real trademark analysis. A registered mark makes the report much more likely to succeed. It does not make it certain.

Brand Rights Protection is probably not available to you

Meta runs a tool called Brand Rights Protection that lets brands search across Facebook and Instagram for content misusing their intellectual property and report it in bulk. It is genuinely good. It is also gated.

To be accepted you generally need an active registered trademark, a business portfolio in Meta Business Suite, a clean record of intellectual property compliance, and an applicant who is an employee of the brand. You apply at facebook.com/business/help/1243114766520165 and Meta decides.

Most small businesses do not have a registered trademark. If that is you, this door is shut today, and no consultant can open it. A US federal trademark application takes many months and costs real money. It can be worth starting if impersonation is a recurring problem for you, but it is not a fix for this week's fake Page.

What a verified badge does and does not do here

Be clear about this, because it is where people waste money in a panic.

Meta Verified does not remove the fake Page you found this morning. Meta does not advertise it as a way to get your report reviewed faster. What it does is make your account the one that is obviously real, and it adds a support channel and impersonation monitoring, where Meta says it will remove accounts it determines are pretending to be you.

Meta Verified for business is listed in the US at 14.99 dollars a month for Business Standard, 49.99 for Business Plus, 149.99 for Business Premium, which adds employee impersonation protection for two people, and 499.99 for Business Max, which covers five. Prices and availability vary by market, so check the current page before budgeting.

That is a reasonable ongoing purchase if you are being impersonated repeatedly. It is a poor emergency purchase. Buy it because you want a standing defence and a support line, not because you expect it to delete the fake Page. If someone sells it to you as a takedown tool, they are misleading you.

Realistic outcomes and timelines

Meta publishes no target response time for impersonation reports, so the wait is unpredictable. Some come back saying the content does not go against Meta's standards, which is common and does not mean you were wrong. Appeal it, and file again with better evidence and the correct policy named.

Takedowns fail. That is the honest answer. Meta decides, you do not, and there is no appeal beyond Meta's own process short of legal action. A well-documented report from an established Page with a registered trademark gives Meta more to act on than a thin report from a new account, but nothing here is guaranteed and anyone who guarantees it is selling you something they cannot deliver.

Assume the offender comes back. Nothing stops the same person creating a new Page after one is removed, sometimes under a slightly different spelling. Removal is maintenance, not a cure. Set a recurring reminder to search your business name on Facebook and Instagram once a month, and keep the evidence folder going. A documented pattern of repeat impersonation is much more persuasive to Meta, and to a lawyer, than a single incident.

The part most guides get wrong

Somebody will tell you to set up email authentication in response to this. That advice is not wrong, but it is often sold dishonestly, so here is the boundary.

SPF, DKIM and DMARC are DNS records that tell receiving mail servers which systems are allowed to send email using your domain. BIMI adds your logo next to your messages in inboxes that support it. Together, at enforcement, they stop somebody sending email that claims to come from your exact domain.

They do nothing about a Facebook Page. They do nothing about a lookalike domain, and nothing about a fake profile or a cloned website. Someone can register a domain one letter off yours tomorrow and email your customers from it, fully authenticated, and DMARC will not care.

That is a narrower benefit than it is usually sold as, and it is still a real one. Impersonation campaigns often run on email as well as social. Closing your own domain is worth doing. It is just not the answer to the question you searched.

When you do not need to hire anyone

If it is one fake Page, you have a Facebook account, and you can spend twenty minutes, do it yourself. The in-app report is free, the forms are free, and paying someone to click through them for you is a waste of your money.

Hire help when it is recurring, when there are multiple fake accounts running ads in your name, when reports keep getting rejected and you cannot work out why, or when you want the underlying defences built properly so this is less likely next year.

And if the fake Page has already taken money from your customers, the bank and law enforcement come first. Nothing anyone sells you is more urgent than that.

Working with us

We are Verified Everywhere, part of JWC Apps in San Diego. We ran this whole stack on our own business first, a hockey apparel store called Bench Clearers: DMARC at enforcement, a Verified Mark Certificate through GlobalSign, BIMI live in Gmail, and Meta Verified on a 52,000-follower Instagram account. We work only through official channels, we never take your passwords, ID documents or card numbers, and if we do not believe a case can succeed we say so and decline rather than take the fee.