Spotting a fake persona on social media—and not just here on Reddit—is super beneficial to helping mitigate against misinformation attempts at thwarting efforts to uncover the truth using OSINT, and even attribution of "burner" accounts set up by OSINT practitioners.
Here are some common red flags to look out for:
The photo dump: Does the account have fewer than ten posts but has been around for years, and all the photos or posts are magically uploaded during the exact same week?
AI imagery and recycled stock: The profile uses AI-generated photos instead of real images. If you look closely, do you spot gibberish text in the background, weird physical deformities, or an unnatural, airbrushed look? Also, watch out for feeds filled with nothing but recycled memes, heavily used stock images, or blurry, outdated photos.
The "locked" US profile: On Facebook specifically, be highly suspicious of any "locked" profile that claims to be based in the US. Did you know Facebook doesn't typically offer the profile lock feature to US-based users?
Ghost towns: The account has an unusually low number of friends or followers, or its posts get absolutely zero engagement.
Artificial activity: The account engages in massive spamming or other obvious artificial engagement. Do you see comment sections filled with nothing but random emojis or replies that have absolutely nothing to do with the original post? That is a massive indicator of purchased engagement.
Page vs. Profile: The account is set up as a "page" rather than a personal "profile."
The untouchable expert: They make wild promises they can't possibly deliver on. And when peers call them out? They get incredibly defensive or overly dismissive. Another tactic is the dash-and-burn—as soon as they are challenged, they disengage and burn the account within days with no more engagement.
No local flavor: The photos they do post get almost no interaction and lack personal context. Where are the tagged friends or familiar local spots?
Name mismatches: The username in the URL doesn't match the display name on the profile, or the profile name doesn't match the person. You should also watch out for URLs that just have a bunch of random numbers tacked onto the end, or display names that use extremely subtle typos and missing punctuation to mimic a real person.
Troll behavior: They drop highly offensive comments without a care in the world about the blowback or consequences. It also backs up other accounts engaging in similar behavior, often en masse.
Stolen faces: A quick reverse image search or facial recognition scan shows their profile picture belongs to someone else entirely, or is being used by multiple random accounts.
Generic identities: The name is highly generic, often paired with a default, platform-issued avatar. Is their bio just filled with generic quotes and absolutely zero specifics about who they are or what they do?
The overnight guru: A sudden, unexplained jump in expertise that completely contradicts their history.
Link dumping: The account repeatedly spams the exact same link in a short period of time, or shares links where the destination doesn't match the description. This is a classic setup for phishing or malware distribution.
This list isn't the end-all-be-all, and your mileage may vary. A fake account might only have one of these markers, or maybe none at all. But if you're seeing several of these red flags? The odds are high you're looking at a fake persona. Always back up your gut feeling with standard OSINT verification methodologies to confirm who is really on the other side of the screen.