Catfishing: a source-based guide for 2027

Catfishing is being in a relationship (romantic, friendly, professional, or just conversational), with an account rather than a person. The photos belong to someone else. The name, the job, the city, and sometimes the age are invented. What is real is the time you are putting in.

Money is only one motive. Others include control, harassment by someone you already know, gathering material for extortion, getting into your accounts, and adults approaching minors. That matters because "they have never asked me for money" is not the reassurance it sounds like.

This page is about establishing whether a person is real, meeting safely if they are, and what to do about image-based coercion if it has already started. Where money is the motive, the request itself follows the pattern set out in romance scams, and the public description of the term is in the Wikipedia article on catfishing.

What to take away

The relationship intensifies far faster than the actual contact justifies: declarations, future plans, and exclusivity, all before you have seen them live.
The point of these is that they work whether or not the person turns out to be who they said.
Stop contact without announcing it, save the conversation and profile first, then report and block.
The useful position is that they can tell you anything without losing the phone.

Checks you can run yourself

None of these require any special access, and none of them involve investigating someone's private life. They test one claim: that this account belongs to the person it says it does.

The photos. Run a reverse image search on the profile pictures. A face that appears under other names, or that belongs to a model, an actor, an influencer, or a serving officer, ends the question. A clean result proves nothing either way, a photo can simply be uncropped from a private album, so treat it as a fast negative test rather than a clearance.

The account's history, not its appearance. How long has it existed? Do the posts stretch back through ordinary time, with the boring texture of a real life: bad photos, the same handful of people commenting, places that fit each other? Or is it a short run of polished images and comments from accounts that resemble one another?

Consistency across the things they cannot control. Does the time zone they are messaging from match the city they claim? Does the employer exist, and does the role make sense with the age and the story? Does the name return anything at all, anywhere, including nothing: a complete absence is itself unusual for an adult professional.

The live video call, at a time you choose. This is the strongest single test available to you, and it is the one most often deflected. Ask for a call now, not a scheduled one. During it, ask for something unrehearsed: turn the camera to the window, wave, say a word you pick. Recorded clips, a few seconds of "bad connection", and calls that end when you ask for something specific are all the same answer. Refusing video for weeks or months, with a new reason each time, is an answer too.

Ask about a shared detail with a wrong fact in it. If they claimed to work in a particular city, refer to a landmark that is in a different one and see whether it is corrected. This is not a trap so much as a check that anyone real passes without noticing.

Behavior that should slow you down

The relationship intensifies far faster than the actual contact justifies: declarations, future plans, and exclusivity, all before you have seen them live.
There is an early push to move onto a private messaging app. That sounds like closeness, and it also removes the platform's ability to see the conversation, warn you, or act on the account.
Meeting is always nearly happening and never happens. Canceled flights, work emergencies, a family crisis in the week you were finally going to meet.
Questions run overwhelmingly in one direction. You know very little that is checkable; they know a great deal.
Secrecy is encouraged. Not telling friends, not posting about it, not introducing them to anyone.
The story adjusts when questioned, and the adjustment is delivered with hurt rather than with detail.
Photos are requested early, and the requests escalate. This is the single most reliable warning on the list.

Where checking stops

There is a real line between confirming that a person exists and compiling a file on them. Reverse image searching a public profile photo, asking for a live call, and looking at whether a claimed employer exists are all reasonable. Pulling records on a private individual, buying a report about them, or trying to identify their family and address is not: it is intrusive, it is often the behavior of the person doing the harassing, and it is a poor substitute for the video call. The legitimate uses of formal record checks and where consent is required are covered in background checks.

If someone is checkable and you still feel wrong about them, that is enough. You do not need to prove fraud to stop replying.

Meeting in person, if you decide to

The point of these is that they work whether or not the person turns out to be who they said.

Video call first. Not optional. Everything below assumes you have seen them live.
Public place, daytime, your choice of venue. Not their neighborhood and not somewhere you have never been.
Your own transport, there and back. Do not accept a lift, and do not let a first meeting move to a private address.
Tell someone the details (who, where, when, and when you will be back), and arrange to check in. Share your live location with them for the evening if your phone supports it.
Keep your drink with you and order it yourself.
Keep your phone charged, and keep your bag and keys with you rather than at the table.
Do not hand over documents, cards, or your phone, and do not do a favor that involves money, a package, or an account.
Leave whenever you want. No explanation is owed. A person worth meeting will be fine with a short first meeting.

Image-based coercion

This deserves its own treatment because the response is counter-intuitive and speed matters.

The shape is consistent: a warm, fast conversation moves to intimate photos or a video call that is recorded, and then a demand appears (money, more images, or an action), backed by a threat to send everything to your contacts. The threat often arrives with a screenshot of your friend list to prove they can.

If it is happening now:

Do not pay. Paying marks you as someone who pays, and the demand returns. This is consistent enough to treat as a rule.
Do not send more, and do not keep negotiating. Every additional message is more material.
Do not delete anything yet. Screenshot the profile, the handle, the messages, the demand, and any payment details given. Save it somewhere separate.
Lock down the audience. Make your friend or follower list private, restrict who can see your posts and who can message you, and consider temporarily limiting your profile. This directly reduces what the threat is worth. The relevant settings are gone through in the social media privacy audit.
Report the account to the platform, using the extortion or intimate-image category where one exists, and then block.
Tell one person. The isolation is the hold they have. Telling a friend, a partner, or a parent takes most of the power out of the threat immediately.
Report it to the authorities. In the US, that is the FBI's Internet Crime Complaint Center, and the Federal Trade Commission for the fraud aspect. Local police matter too, particularly if there is an ongoing threat.

On removal: services exist that let you create a digital fingerprint of an image on your own device and share only that fingerprint with participating platforms, so uploads can be blocked without you sending the picture anywhere. In the US, the National Center for Missing & Exploited Children operates a reporting line and a removal service for images of people who were under 18 at the time. Find these through an official or well-established organization rather than through anyone who contacts you offering removal for a fee, that offer is itself a scam.

If the person targeted is a minor, it is not a matter for embarrassment or a private conversation. Report it to the platform, to law enforcement, and to the national child protection reporting service. The child has not done anything that warrants punishment, and treating it that way is what keeps these cases hidden.

If you were catfished

Stop contact without announcing it, save the conversation and profile first, then report and block.
Check what they actually learned: your address, workplace, schedule, family names, the answers to your account recovery questions. Change anything that doubles as a security answer, and run through account security.
Reduce what the next approach can start from, which is a settings job rather than a vigilance one, covered in privacy settings.
If money moved, or if you were asked to receive or forward funds for them, contact your bank and follow scam reporting and recovery. Moving money for someone else can expose you to serious legal trouble even when you did not know.
Expect a second approach, sometimes from a "new" person, sometimes from someone offering to help you recover money for a fee. The second one is always a scam. Where the new person uses the name of somebody you know, the account is the problem rather than the message, which is impersonation scams.
The consumer regulator's own account of how these approaches run is the FTC's guidance on romance scams.
Take the emotional part seriously. Losing a relationship with someone who did not exist is a genuinely strange grief, and it is not a sign of poor judgment.

For parents and carers

The useful position is that they can tell you anything without losing the phone. Most concealment comes from fear of the device being taken away, not from wanting to hide the person.
Teach the two checks that matter: a live video call before trusting anyone, and never sending an image you would not want forwarded.
Say plainly, before it ever happens, that if an image gets out you will help and not punish. This one sentence is what makes a child come to you in the first hour instead of the third week.
Watch for the pattern rather than the content: a new online friendship that becomes secretive and intense, gifts or game credits arriving, a device turned away from the room, mood changes tied to messages.

Common questions

They video called me, so they must be real.

Not by itself. Short, dark, glitching calls, clips played back, and calls that end the second you ask for something specific are all common. A live call at a time you choose, where they respond to an unpredictable request, is the version that counts.

Is catfishing illegal?

Using a false persona is not automatically a crime by itself in most places, but the things done through it usually are: fraud, extortion, harassment, stalking, and any sexual contact involving a minor. Report the conduct rather than trying to work out the category.

Should I confront them once I am sure?

There is no benefit. It warns them to delete the account and the evidence, and it can turn a scam into harassment. Save what exists, report, block.

They have my photos already. Is there any point in reporting?

Yes. Reporting is how accounts get closed before they reach the next person, and removal routes work better with a report behind them. It also puts a record in place if the threat is ever carried out.