THE SHORT ANSWER

Digital impersonation happens when someone falsely presents themselves as a trusted person or organization. Pause, check the claimed identity, leave the incoming channel, contact the person or organization through a route you already trust, and verify the specific request.

The identity and the request can both be false

  • A colleague or executive requesting an unusual payment or access change
  • A bank or company asking for sensitive information
  • A family member or friend describing an emergency
  • A customer-support representative offering to fix an unexpected problem

Some details may be accurate because they are public, leaked or taken from a compromised account. Correct context does not authenticate the sender.

Evidence & context: United States Federal Trade Commission

Move to a channel the requester did not provide

PAUSE → CHECK IDENTITY → USE A SECOND CHANNEL → VERIFY THE REQUEST. Find the number in your internal directory, official app, statement, card or previously saved contact. Do not use the link or number supplied by the unexpected message.

Evidence & context: Federal Bureau of Investigation

One convincing signal is not enough for high-consequence action

Caller ID, display names, branded pages, profile photographs, voice and video can all be misleading. A second channel also has limits if it depends on the same compromised account. Escalate to another person or in-person confirmation when consequence warrants it.

Use deeper phishing guidance without repeating it

For message and link recognition, read Phishing, Social Engineering & Business Email Compromise. For a repeatable identity check, continue to How to Verify Identity Online.

Sources & further reading

  1. How To Avoid a Government Impersonation Scam

    United States Federal Trade Commission. Official consumer guidance on urgency, payment demands, caller-ID limits and contacting an organization through a known channel. Agency examples and reporting routes are United States-specific.

  2. Business Email Compromise

    Federal Bureau of Investigation. Official defensive guidance explaining BEC and recommending independent verification when account numbers or payment procedures change. Reporting routes are United States-specific.

Examples and exercises are illustrative unless attributed to a source. No independent expert review is claimed.

A correction, a counterexample or an experience worth sharing?

Join the conversation ↗